Hlavní stránka > Výsledky hledání: keywords:"SSL Proxy"
Hledej:
Tipy pro vyhledávaní :: Rozšířené hledání
Hledej ve sbírkách:
Seřadit podle: Zobrazit výsledky: Výstupní formát:
Národní úložiště šedé literatury Nalezeno 2 záznamů.  Hledání trvalo 0.01 vteřin. 
Extraction of Decrypted Data from SSL Connection
 Pastuszek, Jakub ; Veselý, Vladimír (oponent) ; Grégr, Matěj (vedoucí práce)
The goal of the thesis is to develop an application able to decrypt a secure connection and mirror decrypted data to another node for analysis.  The application encourages illegal purposes but the intended use of the resulting product is a legal interception. SSLsplit has been selected from the set of tools for this thesis because of its features and performance. This decision was based on tools' benchmarking and features comparison. SSLsplit signs the target server's certificates on the fly using a self-signed certificate. It runs as a transparent proxy directly on the central device in the network (router). SSLsplit performs a man-in-the-middle attack between a client and a server without any notice from either of them. The application sends the decrypted content of processed packets to a specific host in the network for further processing. Integration into the netc interface has been implemented for easier SSLsplit configuration. The application has been tested to determine its performance limits. Performance tests of the finished solution show a significant decline of transactions per second (TPS) when using SSLsplit in comparison to only forwarded traffic. The mirroring feature does not significantly affect the number of TPS or restrict SSLsplit itself. The results show that SSLsplit is capable of real operation with certain limitations.
Úplný záznam
Extraction of Decrypted Data from SSL Connection
 Pastuszek, Jakub ; Veselý, Vladimír (oponent) ; Grégr, Matěj (vedoucí práce)
The goal of the thesis is to develop an application able to decrypt a secure connection and mirror decrypted data to another node for analysis.  The application encourages illegal purposes but the intended use of the resulting product is a legal interception. SSLsplit has been selected from the set of tools for this thesis because of its features and performance. This decision was based on tools' benchmarking and features comparison. SSLsplit signs the target server's certificates on the fly using a self-signed certificate. It runs as a transparent proxy directly on the central device in the network (router). SSLsplit performs a man-in-the-middle attack between a client and a server without any notice from either of them. The application sends the decrypted content of processed packets to a specific host in the network for further processing. Integration into the netc interface has been implemented for easier SSLsplit configuration. The application has been tested to determine its performance limits. Performance tests of the finished solution show a significant decline of transactions per second (TPS) when using SSLsplit in comparison to only forwarded traffic. The mirroring feature does not significantly affect the number of TPS or restrict SSLsplit itself. The results show that SSLsplit is capable of real operation with certain limitations.
Úplný záznam

Chcete být upozorněni, pokud se objeví nové záznamy odpovídající tomuto dotazu?
Přihlásit se k odběru RSS.
Digitální repozitář :: Hledej :: Nový záznam :: Personalizace :: Nápověda
Powered by Invenio v1.1.2
Spravuje admin.invenio@techlib.cz
Tato stránka je dostupná také v následujících jazycích:
Česky  English