A correlation based detection system for keys reuse in SSH/SSL
Nabil El Kadhi · International Conference on Computer Engineering and Applications · 2011
This paper introduces a key correlation based cryptographic protocol analyzer. This analyzer uses network events and information as inputs and applies a set of abstract interpretation techniques for key correlation-reuse detection purpose. CSA or Correlation System Analyzer has been designed in two modules : Information collection sniffers or sondes and information analyzer that is based on formal verification method The designed tool tracks coherence and freshness of cryptographic keys used through an SSL (Secure Socket Layer) or SSH (Secure SHell) sessions. CSA is also able to verify secret preservation of crucial information by propagating specific constraints. This paper describes CSA global architecture and operator mode, it also includes significant results and experimentations.