Bypassing HTTP Strict Transport Security
Offered By: Black Hat via YouTube
Course Description
Overview
Explore the vulnerabilities of HTTP Strict Transport Security (HSTS) in this 46-minute Black Hat conference talk by Jose Selvi. Delve into the evolution of SSL/TLS attacks, from cryptographic weaknesses like BEAST and CRIME to protocol-based attacks such as SSLStrip. Learn how HSTS was developed to counter these threats, particularly SSLStrip attacks. Examine the strengths and weaknesses of HSTS, with a focus on an inter-operation vulnerability that could potentially bypass this security measure. Gain insights into how this vulnerability could be exploited, allowing attackers to employ techniques like SSLStrip despite HSTS protection. Enhance your understanding of web security and stay informed about potential risks in HTTPS implementations.
Syllabus
Bypassing HTTP Strict Transport Security
Taught by
Black Hat
Related Courses
Computer SecurityStanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network