Comparative Analysis and Development of Mobile Device Authentication Framework for Corporate Networks
Mboto Peter
Department of Computer Engineering and Informatics, Faculty of Engineering, Busitema University, P.O.Box 236, Tororo, Uganda.
Gilbert Gilibrays Ocen *
Department of Computer Engineering and Informatics, Faculty of Engineering, Busitema University, P.O.Box 236, Tororo, Uganda.
Godliver Owomugisha
Department of Computer Engineering and Informatics, Faculty of Engineering, Busitema University, P.O.Box 236, Tororo, Uganda.
Alunyu Andrew Egwar
Department of Computer Engineering and Informatics, Faculty of Engineering, Busitema University, P.O.Box 236, Tororo, Uganda.
Matovu Davis
Department of Computer Engineering and Informatics, Faculty of Engineering, Busitema University, P.O.Box 236, Tororo, Uganda.
Twaibu Semwogerere
Department of Computer Engineering and Informatics, Faculty of Engineering, Busitema University, P.O.Box 236, Tororo, Uganda.
Rwahwire Samson
Department of Polymer, Industrial and Textile Engineering, Faculty of Engineering, Busitema University, P.O.Box 236, Tororo, Uganda.
*Author to whom correspondence should be addressed.
Abstract
Several systematic reviews on mobile device technologies have been undertaken mostly identifying mobile security threats and challenges to corporate organisations' sensitive private information. This paper surveyed the existing level of secure authentication achieved by various mobile device-related frameworks against their listed goals. The solutions and security level of the existing authentication approaches among these categories were compared and improved on the KANYI BYOND framework by introducing a Radius server with the 802.11 authentications supported feature that provides access control to wireless routers, access points, hotspots in EAP/WPA-Enterprise/WPA2-Enterprise modes as means to achieve multiple authentications to mobile device users in corporate networks. Testing and validation of the resulting framework were done with the help of a riverbed modeler and a Denial of Service attack was simulated on all mobile devices' nodes in the designed network. The results indicated that the resulting framework provides multiple authentications and is thought to overcome self-reassuring by mobile device users on the network.
Keywords: Mobile device authentication, framework, DOS attacks, CVSS, simulation