Principle and Prevention of SSL Attack In Gateway Mode
Huang Zheng · Information Security and Communications Privacy · 2011
SSL protocol,a key protocol in achieving Internet communication security,is generally used for transmission of sensitive data. It is of high security for its encryption and authentication of the sensitive data. The usual method for SSL attack is to forge X.509 certificates based on Man-in-the-Middle,however there are usually warning indicators in the browser. Recently,a hidden and better method for SSL attack could avoid this warning. The paper describes the principle of SSL attack,the demonstration of SSLStrip in acquiring the password of Gmail in the LAN environment. Meanwhile the safety tests on Firefox and Chrome are done,and finally some preventive measures against SSL attack are also provided.