Rules and Results for SSL/TLS Nonintrusive Proxy Based on JSON Data
Suhairi Mohd Jawi, Fakariah Hani Mohd Ali · 2016
The purpose of this study is to implement an adaptive, non-intrusive proxy in between a client and SSL/TLS web server using more practical and "middle" approach that can moderate the ongoing and future SSL/TLS sessions. Connection attributes from certificate and SSLProbe results are compared against a set of policies written in JavaScript Object Notation (JSON). The proxy shall handle client session and alerts users when the attributes from the SSL/TLS sites are matched with policy based upon the predefined rules.