дослідження вразливостей реалізації криптографічних методів захисту протоколу SSL/TLS

дослідження вразливостей реалізації криптографічних методів захисту протоколу SSL/TLS

23.12.2019 | Зимницький Олег Геннадійович
The thesis titled "Study of Vulnerabilities of Cryptographic Methods Implementation of SSL/TLS Security Protocol" is a 90-page document that includes 25 illustrations, 7 tables, and 62 references. The research focuses on analyzing vulnerabilities in open-source implementations of the SSL/TLS protocol and developing a methodology for detecting these vulnerabilities during the development process. The object of study is the vulnerabilities in open-source SSL/TLS implementations. The methods used include general scientific methods such as comparison and system analysis, as well as specific methods like static and dynamic code analysis. The scientific novelty lies in creating a methodology for analyzing TLS protocol implementations at the development stage using static and dynamic code analysis and modular testing. The results can be applied to detect vulnerabilities in SSL/TLS protocol implementations written in C programming language throughout the entire development process. The thesis was defended at Ternopil National Technical University named after Ivan Puluj on December 23, 2019, in Ternopil, Ukraine. The author, Oleh Zymnytskyi, is a Master's student in Cybersecurity, and the supervisor is Natalia Zahorodna, a candidate of technical sciences and a professor at the Department of Cybersecurity. The reviewer is Natalia Kupanets, a doctor of sciences in social communications and a professor at the Department of Computer Sciences. The thesis is categorized under UDC 004.056.5.The thesis titled "Study of Vulnerabilities of Cryptographic Methods Implementation of SSL/TLS Security Protocol" is a 90-page document that includes 25 illustrations, 7 tables, and 62 references. The research focuses on analyzing vulnerabilities in open-source implementations of the SSL/TLS protocol and developing a methodology for detecting these vulnerabilities during the development process. The object of study is the vulnerabilities in open-source SSL/TLS implementations. The methods used include general scientific methods such as comparison and system analysis, as well as specific methods like static and dynamic code analysis. The scientific novelty lies in creating a methodology for analyzing TLS protocol implementations at the development stage using static and dynamic code analysis and modular testing. The results can be applied to detect vulnerabilities in SSL/TLS protocol implementations written in C programming language throughout the entire development process. The thesis was defended at Ternopil National Technical University named after Ivan Puluj on December 23, 2019, in Ternopil, Ukraine. The author, Oleh Zymnytskyi, is a Master's student in Cybersecurity, and the supervisor is Natalia Zahorodna, a candidate of technical sciences and a professor at the Department of Cybersecurity. The reviewer is Natalia Kupanets, a doctor of sciences in social communications and a professor at the Department of Computer Sciences. The thesis is categorized under UDC 004.056.5.
Reach us at info@study.space
[slides and audio] The Internet Key Exchange (IKE)