2010 · 30 citations · 4 references
ComputingComputer ScienceCybersecurityAuthenticationComputer SecuritySecurity ProtocolsAuthentication ProtocolsCertificate-based AuthenticationE-commerce SecurityInternet Protocol SecurityProtocol AnalysisWeb AuthenticationAuthentication AttacksAuthentication HandshakesCertificate-based HandshakesHandshake VulnerabilitiesSecure Authentication ProtocolsSsl Handshake ProtocolSsl VulnerabilitiesWeb Authentication Protocols
With the development of e-commerce, SSL protocol is more and more widely applied to various network services. For the defect of SSL authentication, this paper analyses two kinds of drawbacks in SSL handshake, and respectively conducts fake certificate and conversion from HTTPS to HTTP data to attack. Both of them are dangerous to HTTPS communication. For that reason, we have proposed three different measures to strengthen data security, which are static ARP table, enhanced certificate system, and two-way authentication. Experimental results show that three methods are effectively defensive against the HTTPS hijacking attacks.
4
Man-in-the-Middle Attack to the HTTPS Protocol
Franco Callegati, Walter Cerroni, Marco Ramilli · IEEE Security & Privacy · 2009 · 341 citations
Thawatchai Chomsiri · 2007 · 33 citations
Peter Burkholder · 2009 · 21 citations