An Improved SSL VPN Protocol for Anti Man-in-the-Middle Attack Based on the TCM
WU Zhi-gang, Shigang Li, Yaping Chi · Journal of Beijing Electronic Science and Technology Institute · 2012
By analyzing the principles of man-in-the-middle attack for the SSL VPN protocol and its solutions,and aiming at the problem that the existing solutions have not considered the factor of platform environment,a SSL VPN improvement protocol based on TCM is proposed in the paper.By improving the data structure of the protocol data unit,defining new message types,and adding the trusted platform integrity information and trusted certificate in the handshake protocol,it can prevent the man-in-the-middle attacks based on the underlying credibility.