ALPACA - Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Offered By: Black Hat via YouTube
Course Description
Overview
Explore the vulnerabilities in TLS authentication through this 44-minute Black Hat conference talk. Delve into the concept of Application Layer Protocol Confusion (ALPACA) and its potential for man-in-the-middle attacks on TLS traffic. Learn how attackers can exploit the lack of binding between TCP connections and intended application layer protocols to redirect TLS traffic to different service endpoints. Gain insights from security researchers Marcus Brinkmann and Juraj Somorovsky as they analyze and discuss mitigation strategies for these cracks in TLS authentication across various protocols such as HTTP, SMTP, IMAP, POP3, and FTP.
Syllabus
ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Taught by
Black Hat
Related Courses
Computer SecurityStanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network