Authentication Protocol Risk Scoring: A Classification Approach

Authentication is a key aspect of cybersecurity, ensuring that only legitimate users and devices access protected resources. Yet, many common protocols such as PAP, CHAP, RADIUS, and LDAP still suffer from critical weaknesses. This paper introduces a risk-based classification model using CVE, CVSS, and CWE data to assess their security level. Results show recurring flaws, including unencrypted credentials, weak cryptography, and replay or impersonation risks. We also outline current improvements, such as stronger encryption, biometric methods, and AI-driven detection. The study helps guide the choice of safer authentication mechanisms and supports the development of more resilient security infrastructures.