A Browser-Based Distributed System for the Detection of HTTPS Stripping Attacks against Web Pages - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2012

A Browser-Based Distributed System for the Detection of HTTPS Stripping Attacks against Web Pages

Résumé

HTTPS stripping attacks leverage a combination of weak configuration choices to trick users into providing sensitive data through hijacked connections. Here we present a browser extension that helps web users to detect this kind of integrity and authenticity breaches, by extracting relevant features from the browsed pages and comparing them to reference values coming from different sorts of trusted sources. The rationale behind the extension is discussed and its effectiveness is demonstrated with some quantitative results, gathered on the prototype that has been implemented for Mozilla Firefox.
Fichier principal
Vignette du fichier
978-3-642-30436-1_47_Chapter.pdf (82.38 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01518220 , version 1 (04-05-2017)

Licence

Paternité

Identifiants

Citer

Marco Prandini, Marco Ramilli. A Browser-Based Distributed System for the Detection of HTTPS Stripping Attacks against Web Pages. 27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Crete, Greece. pp.549-554, ⟨10.1007/978-3-642-30436-1_47⟩. ⟨hal-01518220⟩
51 Consultations
55 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More