SSL STRIP ATTACK THREAT DETECTION DESIGN FOR IMPLEMENTATION ON RASPBERRY PI MODULE

• Main Author: Hadynoer, Yan
• Format: Theses
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/45588
• Institution: Institut Teknologi Bandung

Online transactions now rely on the security of connection between client and server. SSL protocol in HTTP communication (commonly known as HTTPS) provide security functions in network communication by utilizing the application of cryptography inside. The latest SSL version was designed to prevent data theft, but still found exploitation of security holes in the implementation of SSL with MITM attacks such as hijacking HTTP traffic using SSL strip technique. SSL strip attack has long been published, but nowadays the threat can still be done for some applications that allow redirecting access. SSL Strip Mitigation models and prevention against SSL-stripping, such as Forcehttps, HProxy, SSLock, HTTPS-enforcement, MyBrowser, and CAT+S, there are still limits to these models and generally run in the application’s layer which depends on direct interaction with users, where most of them were not aware the threat of SSL stripping when accessing to the webpage. This research designed a detection method for SSL strip attack as a form of network security services that running on network layer and already implemented to Raspberry Pi module.