Original title: Demonstrace a analýza útoků na protokol HTTPS
Translated title: Demonstration and Analysis of HTTPS Attacks
Authors: Murgaš, Adam ; Malinka, Kamil (referee) ; Ryšavý, Ondřej (advisor)
Document type: Bachelor's theses
Year: 2023
Language: eng
Publisher: Vysoké učení technické v Brně. Fakulta informačních technologií
Abstract: [eng] [cze]
Cieľom tejto práce je analyzovať dva útoky na protokol HTTPS, najmä útoky BEAST a CRIME. Hlavnou pointou práce je zistiť, či sú tieto útoky stále možné s dnešnými technológiami, a zároveň demonštrovať ako tieto útoky funguju a ako sa podobným útokom vyhnúť alebo ako ich včas detekovať. Táto práca opisuje teoretický základ týchto útokov a taktiež opisuje možné riešenia pre detekciu a prevenciu. Po teoretickom základe a spôsoboch prevencie, táto práca taktiež poskytuje demonštráciu princípov týchto útokov a taktiež dataset, ktorý sa zameriava na určité metriky útoku, aby mali čitatelia lepšiu znalosť o princípoch za týmito útokmi, pretože podobné útoky by mohli byť objavené v budúcnosti. The objective of this report is to analyze two attacks against the HTTPS protocol, namely the BEAST and CRIME attacks. The main point is to see whether or not they are still possible with the technologies of today, as well as demonstrate how they work and how to prevent or detect similar attacks in the future. This report describes the theoretical foundation behind these attacks and addresses possible solutions for detection or prevention. Following the theoretical foundation and the prevention and detection methods, this report also provides a demonstration of the principles behind these attacks as well as a dataset focused on certain metrics regarding the attacks, in order for readers to gain better understanding of their principles, as similar attacks might be discovered in the future.
Keywords: BEAST; blokové šifry; Cipher Block Chaining (CBC); CRIME; HTTPS; Inicializační Vektor (IV); Python; soubor šifer; SPDY; TLS komprese; TLS/SSL; BEAST; block ciphers; Cipher Block Chaining (CBC); cipher suites; CRIME; HTTPS; Initialization Vector (IV); Python; SPDY; TLS compression; TLS/SSL

Institution: Brno University of Technology (web)
Document availability information: Fulltext is available in the Brno University of Technology Digital Library.
Original record: http://hdl.handle.net/11012/210396

Permalink: http://www.nusl.cz/ntk/nusl-526821


The record appears in these collections:
Universities and colleges > Public universities > Brno University of Technology
Academic theses (ETDs) > Bachelor's theses