Systematic Security Analysis of TLS and Other Stateful (Cryptographic) Protocols

Abstract

Transport Layer Security (TLS) is arguably the most important cryptographic protocol. We use it to secure the connection to websites, Web services or to create Virtual Private Networks (VPNs). However, the complexity of TLS resulted in various design and implementation failures, leading to many TLS attacks with fancy names like Heartbleed, FREAK, DROWN, or Raccoon.

In this presentation, we first give an overview of several well-known TLS attacks. We then highlight systematic methods to analyze TLS implementations, including fuzzing, testing, scanning, and state learning. We show how these methods can be used to find vulnerabilities in TLS as well as in other stateful protocols.

Speaker

Prof. Dr.- Ing. Juraj Somorovsky will be speaking at this event.

How to attend

This will be an online event held on Zoom.

• Meeting ID: 929 6305 5701
• Passcode: 522738

Attend the seminar