2013 was the year when BREACH attack was introduced to Black Hat USA that is still a serious attack vector that exploited compression to compromise SSL connections.
In this talk, methods are proposed to practically extend the attack against the most commonly used encryption ciphers. Command-and-Control technique is described to exploit plain HTTP connections in a persistent manner. Statistical methods are also presented that can be used to bypass the noise present in block ciphers as well as noise present in web applications. Moreover, Parallelization and optimization techniques are also explored.
Furthermore, talk is closed by proposing novel mitigation techniques. Finally the tool implementation and experimental results on popular web services is shown.
Industrial Cybersecurity
September 28, 2023
Want always be up to date?
By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.
Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings
News broke last week that The Pirate Bay, the tremendously popular torrent site, was caught red-handed using users’ CPU to make profit by mining a
Whoever considered that there will be a period when we can record videos at home and view it on the TV or laptop, or can
In this talk, Michael Schwarz & Anders Fogh will present their research into how the design of DRAM common to all computers and many other devices
Want always be up to date?
By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.
Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings
