Security-3

M173. Access Control Methods Analysis

1. Project theme

In the context of a growing concern for data security, network access control has become an important part of every network security system.

The purpose of this project  is to provide a comparison between different EAP Methods that can be used with IEEE 802.1x, Port Based Network Access Control, standard as a means of protecting a computer network against unauthorized access.

2. Objectives
  • Analyse and compare protocols 802.1x, EAP-TLS, EAP-FAST, WebAuth and others.
  • Analyse and compare available applications (CISCO ACS, Free Radius).
  • Analyse user groups, rights and restrictions.
3. Bibliography

[1] Denise Helfrich, Lou Ronnau, Jason Frazier, Paul Forbes: Cisco Network Admission Control: Nac Framework Architecture and Design v.1
[2] Jazib Frahim, Omar Santos, David White Jr.: Cisco Network Admission Control: NAC Deployment and Troubleshooting v.2
[3] Brandon James Carroll: Cisco Access Control Security: AAA Administration Services
[4] http://www.ietf.org/rfc/rfc3748.txt
[5] http://www.rfc-archive.org/getrfc.php?rfc=3580
[6] http://freeradius.org/

4. Details
  • coordinator: conf. dr. ing. Razvan Rughinis
  • team: Alexandra CHIORNIŢĂ
  • prerequisites: networking, security
  • location: EG106b
  • schedule: 6 hours/week, 2 semesters
5. Results