The BEAST Wins Again - Why TLS Keeps Failing to Protect HTTP
Offered By: Black Hat via YouTube
Course Description
Overview
Explore three new attacks against TLS on the web in this 53-minute Black Hat conference talk. Delve into the cryptographic weaknesses and implementation issues that enable a resurgence of the 2009 renegotiation attack, learn about exploiting truncation vulnerabilities to bypass anti-stripping defenses, and discover how vulnerabilities in HTTPS deployment can lead to full server impersonation of major websites. Gain insights into the capabilities of attackers operating at both TLS and HTTP levels, understand how to configure HTTPS servers to prevent virtual host confusion attacks, and challenge common misconceptions about TLS and privacy in the context of powerful network attackers.
Syllabus
The BEAST Wins Again: Why TLS Keeps Failing to Protect HTTP
Taught by
Black Hat
Related Courses
Computer SecurityStanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network