Large Scale Scanning of TLS Session Ticket Confusion / Tim Storm ; Supervisors: Prof. Dr.-Ing. Juraj Somorovsky, Prof. Dr. Eric Bodden, Sven Hebrok M.Sc. Paderborn, 2023
Content
- Introduction
- Background
- TLS
- Session Ticket Confusion Attack
- TLS-Attacker
- Design
- Previous Work
- Design Goals
- Scanning for STEK Sharing
- Restricting the Search Space to Promising Candidates
- Implementation
- Evaluation
- Scans
- Results
- STEK Sharing
- Behavior Within Groups
- Identifying Common Properties
- Vulnerablity to Real-World Ticket Confusion
- Supplementary CDN Scan
- Discussion
- Conclusion
- Bibliography
- List of Figures
- List of Tables