<p>Linux-based control and automation systems are increasingly deployed in industrial environments but remain vulnerable to brute-force and credential-stuffing attacks due to their reliance on single-factor authentication. This paper presents a two-factor authentication (2FA) framework that incorporates a centralized out-of-band (OOB) OTP server. The proposed system enforces OTP verification at both the Linux operating system and MySQL database layers, leveraging an independent Java-based OTP server secured with TLS encryption. Experimental evaluation on Ubuntu 22.04 and MySQL 8.0 demonstrates that the method effectively prevents 100% of brute-force login attempts. Although the average authentication time increased by 1.1 seconds, user feedback confirmed high satisfaction with the trade-off between security and usability. The proposed OOB OTP framework offers a practical and robust multi-layer authentication solution tailored for control and robotic systems. Future work will explore the integration of AI-based anomaly detection to further enhance real-time security in industrial platforms.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Out-of-band OTP-based 2FA Architecture for Secure Linux Platforms in Control and Automation Systems

  • Insoo Kim

摘要

Linux-based control and automation systems are increasingly deployed in industrial environments but remain vulnerable to brute-force and credential-stuffing attacks due to their reliance on single-factor authentication. This paper presents a two-factor authentication (2FA) framework that incorporates a centralized out-of-band (OOB) OTP server. The proposed system enforces OTP verification at both the Linux operating system and MySQL database layers, leveraging an independent Java-based OTP server secured with TLS encryption. Experimental evaluation on Ubuntu 22.04 and MySQL 8.0 demonstrates that the method effectively prevents 100% of brute-force login attempts. Although the average authentication time increased by 1.1 seconds, user feedback confirmed high satisfaction with the trade-off between security and usability. The proposed OOB OTP framework offers a practical and robust multi-layer authentication solution tailored for control and robotic systems. Future work will explore the integration of AI-based anomaly detection to further enhance real-time security in industrial platforms.