Title :
Detecting and defeating advanced man-in-the-middle attacks against TLS
Author :
de la Hoz, Enrique ; Cochrane, Gary ; Moreira-Lemus, Jose Manuel ; Paez-Reyes, Rafael ; Marsa-Maestre, Ivan ; Alarcos, Bernardo
Author_Institution :
Comput. Eng. Dept., Univ. of Alcala, Alcala de Henares, Spain
Abstract :
TLS is an essential building block for virtual private networks. A critical aspect for the security of TLS dialogs is authentication and key exchange, usually performed by means of certificates. An insecure key exchange can lead to a man-in-the-middle attack (MITM). Trust in certificates is generally achieved using Public Key Infrastructures (PKIs), which employ trusted certificate authorities (CAs) to establish certificate validity chains.
Keywords :
computer network security; public key cryptography; virtual private networks; CA; MITM; PKI; TLS dialogs; advanced man-in-the-middle attacks; authentication; certificate authorities; key exchange; public key infrastructures; security; virtual private networks; Browsers; Internet; Pins; Proposals; Public key; Servers; MITM attacks retaliation; OpenFlow; SDN; certificate-pinning schemes;
Conference_Titel :
Cyber Conflict (CyCon 2014), 2014 6th International Conference On
Conference_Location :
Tallinn
Print_ISBN :
978-9949-9544-0-7
DOI :
10.1109/CYCON.2014.6916404
