RADIUS - Security

Security

The RADIUS protocol does not transmit passwords in cleartext between the NAS and RADIUS server (not even with PAP protocol). Rather, a shared secret is used along with the MD5 hashing algorithm to obfuscate passwords. Because this particular implementation is not considered to be a very strong protection of the user's credentials, additional protection, such as IPsec tunnels or physically secured data-center networks, should be used to further protect the RADIUS traffic between the NAS device and the RADIUS server. Additionally, the user's security credentials are the only part protected by RADIUS itself, yet other user-specific attributes such as tunnel-group IDs or vlan memberships passed over RADIUS may be considered sensitive (helpful to an attacker) or private (sufficient to identify the individual client) information as well. The RadSec protocol claims to solve aforementioned security issues.

Read more about this topic:  RADIUS

Other articles related to "security":

Computer Security - Security By Design
... One approach to computer security is to consider security as one of the base features ... tracking system activity, so that when a security breach occurs, the mechanism and extent of the breach can be determined ...
President Of Ireland - Security and Transport
... Áras an Uachtaráin is protected by armed guards at all times and is encircled by security fencing ... At all times the President travels with an armed security detail which is provided by the SDU (Special Detective Unit - an elite wing of the Irish police force) ...
Computer Security
... Computer security is information security as applied to computers and networks. ...
Transportation In The United States - Ownership and Jurisdiction
... The Transportation Security Administration has provided security at most major airports since 2001 ... except for customs, immigration, and security, which are the responsibility of the United States Department of Homeland Security ... States Coast Guard is the primary enforcer of law and security on US waterways ...
Xpages - Security
... XPages applications and the document oriented database can be secured in multiple ways ... There is a so called ACL (access control list) which contains a list of users, groups and roles and their access rights ...

Famous quotes containing the word security:

    ...I lost myself in my work and never felt that marriage would give me the security I wanted. I thought that through the trade union movement we working women could get better conditions and security of mind.
    Mary Anderson (1872–1964)

    Learned institutions ought to be favorite objects with every free people. They throw light over the public mind which is the best security against crafty and dangerous encroachments on the public liberty.
    James Madison (1751–1836)

    ... most Southerners of my parents’ era were raised to feel that it wasn’t respectable to be rich. We felt that all patriotic Southerners had lost everything in defense of the South, and sufficient time hadn’t elapsed for respectable rebuilding of financial security in a war- impoverished region.
    Sarah Patton Boyle, U.S. civil rights activist and author. The Desegregated Heart, part 1, ch. 1 (1962)