You are here: silicon.com > Resources > White Papers > Networking and Communications > Network Technologies > TCP - IP

TCP - IP White Papers

Traffic Analysis of the HTTP Protocol Over TLS

Tags:
tcp - ip

Overview The paper analyzes attacks that take advantage of the data length information leaked by HTTP transactions over the TLS protocol, in order to link clients with particular resources they might access on a web site. The threat model considered is a public news site that tries to protect the patterns of requests and submissions of its users by encrypting the HTTP connections using TLS, against an attacker that can observe all traffic. The paper shows how much information an attacker can infer about single requests and submissions knowing only their length. A Hidden Markov Model is then presented that analyzes sequences of requests and finds the most plausible resources accessed.

Further White Paper Details
Publisher	University of Cambridge	File Format	PDF
Date Published	January 2009
Format	White Papers
Topics	TCP - IP

Did you find this white paper useful?

Cash In Your PBX -- Upgrade with Cisco. Gain significant new savings now

PBX systems and old telephony applications were just not built for today's business needs. They don't scale easily, struggle to support mobility, and are increasingly expensive to maintain. Now you...

Publisher:
Cisco Systems

IOS Tips and Tricks

There are a number of things you can do with Cisco's IOS to make your life easier. This white paper presents some ways that IOS commands can help streamline your...

Publisher:
Global Knowledge

Tags:
tcp - ip

Dell-Customized Mobility Solutions

The marketplace is overflowing with a multitude of mobility options for businesses of all types and sizes. From notebooks, netbooks, and handheld computers to WiFi, smartphones, and mobile broadband, there...

Publisher:
Dell

Tags:
lan - wan standards

Interactive Guide: Enterprise Mobility

Getting Started With Enterprise Mobility: A Guide to Sybase's Enterprise Mobility Platform. With the broadest portfolio of industry-leading products, an innovative mobility platform that provides a foundation for future growth,...

Publisher:
Sybase

Tags:
wireless lan

Webcast & Video: Special Report on MEAP featuring research from Gartner

Complimentary Webcast: Taking a Strategic Approach to Enterprise Mobility. Whether you're just getting started with mobility or have already rolled out multiple applications, taking a strategic approach to mobility is...

Publisher:
Sybase

Tags:
wireless lan

Slammer time - SQL worm brings net to its knees over weekend

Now suppose the attacker created the needed keep-alive packet and modified the source address so that it contained Server 1's address, then sent the packet to Server 2. And all this in just 376 bytes of code, meaning the entire SQL Slammer worm...

Channel:
Security Strategy

SCO denial-of-service attack intensifies

An attacker, by sending a relatively small number of requests to a server, can essentially use up the target computer's resources. There is always kind of an arms race between how much money you are willing to spend and how much the attacker wants...

Channel:
Law & Policy

Three new Microsoft security patches released

The last vulnerability, in Exchange Server 2003, allows an attacker to abuse the Online Web Access module to access the email inbox of another random user who recently accessed the server. The flaw could allow an attacker to take over a vulnerable...

Channel:
Security Strategy

UK government warns on critical web vulnerability

It said: "The impact of this vulnerability could allow an attacker to create a Denial of Service condition against existing TCP connections. US researcher Paul Watson, who discovered the flaw in TCP (transmission control protocol) late last year...

Channel:
WebWatch

Cisco flags flaws in VoIP and router software

Two flaws exist in the software: one could allow an attacker to paralyse a Cisco IP telephony installation, the other could allow someone with read-only access to the system to gain full privileges, according to the alerts.

Channel:
Security Strategy
Tags:
flaw,
voip,
cisco

Is VoIP the cyber criminal's new best friend?

Botnets are typically controlled by an attacker via Internet Relay Chat (IRC). Investigators monitor those channels to help catch cyber criminals and experts have said ISPs can block traffic to the IRC servers used by zombies in order to thwart...

Featured White Papers

Harnessing the Power of Location Intelligence in the Public Sector

Throughout the world, public services today are under pressure. The current economic climate, where taxreceipts are naturally suppressed, provides very seriousfunding challenges. Moreover, in good times and bad, increasing regulation at the regional and national level is imposing additional duties and responsibilities on the public services without additional resources to carry them out. Store closures are changing the urban landscape. Demographic and/or economic change isincreasing demand for health and social services.Demand for decreased crime rates is focusing minds in law enforcement. And the threat of internationalterrorism is forcing greater contingency duties on the emergency services. The net result is a need to do more with lessquite a challenge.

Publisher:
Pitney Bowes

IBM XIV® Storage System: Power Consumption Reinvented

Reducing power consumption is one of the most significant challenges of IT centers today. With storage needs on a steep rise, it is increasingly clear that new approaches must be explored. This IBM whitepaper shows how, on average, a traditional storage system using mirroring effectively uses less than 21% of its raw capacity, and an XIV system uses approximately 46% of its raw capacity.

Publisher:
IBM

3 Strategies for Reducing IT Support Costs

As companies brace for more bumps in the economic downturn, many organisations are indiscriminately cutting costs. To ensure a seamless transition into the post-recession market, however, slashing and burning is not recommended. Now is the time to strategically trim and strengthen for success. This IDC White Paper explores 3 tangible areas that IT departments should investigate to help strategise cost reduction during the downturn. Download the White Paper to learn: -- Why IT utilisation, end-user support and maintenance budgets are the most strategic areas to investigate -- How to effectively approach cost-saving measures within these areas while maintaining IT performance -- Tools and services the IDC recommends for achieving maximum cost savings and efficiency