Title :
Man-in-the-Middle Attack to the HTTPS Protocol
Author :
Callegati, Franco ; Cerroni, Walter ; Ramilli, Marco
Author_Institution :
Univ. of Bologna, Bologna
Abstract :
Web-based applications rely on the HTTPS protocol to guarantee privacy and security in transactions ranging from home banking, e-commerce, and e-procurement to those that deal with sensitive data such as career and identity information. Users trust this protocol to prevent unauthorized viewing of their personal, financial, and confidential information over the Web.
Keywords :
Internet; hypermedia; protocols; telecommunication security; HTTPS protocol; Web-based application; hypertext transfer protocol secure; man-in-the-middle attack; Communication channels; Cryptography; Data privacy; Data security; Engineering profession; IP networks; Local area networks; Media Access Protocol; Telecommunication traffic; Web server; ARP poisoning; Address Resolution Protocol; DNS spoofing; Domain Name System; HTTPS; MITM; WEB security; man in the middle; self-signed certificate;
Journal_Title :
Security & Privacy, IEEE
DOI :
10.1109/MSP.2009.12
