Naidu, Poluru Praveen Kumar (2015) Tool to exploit Heartbleed Vulnerability. MTech thesis.
OpenSSL is an open-source library that is used to communicate data through a secure protocol known as TLS. TLS is used for secure communication over a channel widely over the internet for various applications both desktop and web like web browsers, emails, chat applications. In April 2014 a security bug called as heartbleed  was found which is very catastrophic that sensitive information like cookies, session data, and even private keys of the server. This vulnerability allows stealing of the contents of the RAM by anyone on the Internet. This also allows the attackers to extract the private keys from the server which can be used to decrypt the HTTPS traffic by doing a man-in-the-middle attack  and eavesdrop on sensitive data and also to impersonate another user. In this thesis report we study the heartbleed vulnerability in depth, propose a method to exploit the vulnerability and develop a tool to exploit.
|Item Type:||Thesis (MTech)|
|Uncontrolled Keywords:||Heartbleed, TLS, OpenSSL, Vulnerability, security|
|Subjects:||Engineering and Technology > Computer and Information Science > Information Security|
|Divisions:||Engineering and Technology > Department of Computer Science|
|Deposited By:||Mr. Sanat Kumar Behera|
|Deposited On:||17 Mar 2016 17:40|
|Last Modified:||17 Mar 2016 17:40|
|Supervisor(s):||Babu, K S|
Repository Staff Only: item control page