Detecting Subverted Cryptographic Protocols by Entropy Checking - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Rapport (Rapport De Recherche) Année : 2006

Detecting Subverted Cryptographic Protocols by Entropy Checking

Résumé

What happens when your implementation of SSL or some other cryptographic protocol is subverted through a buffer overflow attack? You have been hacked, yes. Unfortunately, you may be unaware of it: because normal traffic is encrypted, most IDSs cannot monitor it. We propose a simple, yet efficient technique to detect most of such attacks, by computing the entropy of the flow and comparing it against known thresholds.
Fichier principal
Vignette du fichier
rr-lsv-2006-13.pdf (1.18 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03200826 , version 1 (19-04-2021)

Identifiants

  • HAL Id : hal-03200826 , version 1

Citer

Julien Olivain, Jean Goubault-Larrecq. Detecting Subverted Cryptographic Protocols by Entropy Checking. [Research Report] LSV-06-13, LSV, ENS Cachan. 2006. ⟨hal-03200826⟩
67 Consultations
144 Téléchargements

Partager

Gmail Facebook X LinkedIn More