INVESTIGATION OF DIGITAL CERTIFICATES : Verification of reliability and resistance to external attacks
Gromyko, Evgeniia (2014)
Mikkelin ammattikorkeakoulu
2014
All rights reserved
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2014052810611
https://urn.fi/URN:NBN:fi:amk-2014052810611
Tiivistelmä
The purpose of the current study it to verify the reliability of Digital Certificates implemented on the websites. The thesis helps to get an idea if it is safe to use the online services for the transmission of confidential information. This project allows to identify the security level of HTTPS protocol and its ability to resist to such attacks as spoofing and man-in-the-middle.
In the document the different methods to produce the attacks are presented and results are analysed with the disclosure of benefits and limitations of each of them. The practical part contains detailed information about the process of experiments and all appropriate configurations. The aim of the practice was to intercept the private data such as usernames and passwords transmitted through the secured connection.
The studies shown that the usage of digital certificates does not give 100 percent guarantee of providing the security. Nevertheless, taking into consideration the conditions of experiments realization, it was concluded that for today the use of certificates is one of the most reliable ways of the protection. When the user executes the minimum safety requirements, the probability of data loss is at a quite low level.
The information from this study may be used for learning, testing and improving the security level for websites. It can be useful for IT students, teachers, web developers and security staff.
In the document the different methods to produce the attacks are presented and results are analysed with the disclosure of benefits and limitations of each of them. The practical part contains detailed information about the process of experiments and all appropriate configurations. The aim of the practice was to intercept the private data such as usernames and passwords transmitted through the secured connection.
The studies shown that the usage of digital certificates does not give 100 percent guarantee of providing the security. Nevertheless, taking into consideration the conditions of experiments realization, it was concluded that for today the use of certificates is one of the most reliable ways of the protection. When the user executes the minimum safety requirements, the probability of data loss is at a quite low level.
The information from this study may be used for learning, testing and improving the security level for websites. It can be useful for IT students, teachers, web developers and security staff.