Kevin Gjeka
Threat-TLS: An Intrusion Detection and Monitoring Tool for Mitigating TLS Attacks.
Rel. Diana Gratiela Berbecaru. Politecnico di Torino, Corso di laurea magistrale in Ingegneria Informatica (Computer Engineering), 2024
|
Preview |
PDF (Tesi_di_laurea)
- Tesi
Licenza: Creative Commons Attribution Non-commercial No Derivatives. Download (3MB) | Preview |
Abstract
This thesis explores the Transport Layer Security (TLS) protocol, a widely-used cryptographic protocol designed for secure communication between two parties by exchanging parameters such as cipher suites, keys, and certificates. Originally introduced as SSL 2.0 in 1995, the protocol has evolved to address emerging vulnerabilities, culminating in the current version, TLS 1.3, released in 2018. Despite these advancements, TLS remains susceptible to vulnerabilities due to specific implementations or misconfigurations. Existing tools, such as Qualys' SSL Server Test, TLSAssistant, and TLSAttacker, can assess a host's TLS security at a specific point in time, but lack the capability for continuous monitoring to detect changes that may expose systems to attacks.
Factors like software updates, configuration changes, and internal threats can make systems vulnerable at any time
Relatori
Anno Accademico
Tipo di pubblicazione
Numero di pagine
Corso di laurea
Classe di laurea
Aziende collaboratrici
URI
![]() |
Modifica (riservato agli operatori) |
