20.500.12556/DKUM-75135 Implementacija napadov na protokol TLS/SSL thesis work Implementation of attacks on the TLS/SSL protocol V diplomskem delu smo preučili delovanje protokola TLS/SSL in pet napadov nanj. Preučili smo napade SSL Strip, BREACH, POODLE, Heartbleed in Pasivno opazovanje. Predstavili smo delovanje napadov in pogoje, pod katerimi jih lahko izvedemo, zato smo za vsak napad vzpostavili primerno okolje. Napade smo izvedli in z vsemi razkrili del šifrirane vsebine. Poiskali smo tudi možnosti zaščite za lastnike strežnikov. Za SSL Strip, ki je viden uporabnikom, smo tudi prikazali, na kaj so lahko ti pozorni. In the thesis, we examined the operation of the TLS/SSL protocol and five attacks against it. We examined SSL Strip, BREACH, POODLE, Heartbleed, and Passive Monitoring attacks. We presented the operation of the attacks and the conditions under which they can be carried out. Therefore, we set up an appropriate environment for each attack. The attacks were executed and parts of the encrypted content were revealed. We also found mitigations for server owners. For SSL Strip, which is visible to users, we have shown what they can pay attention to. protokol TLS/SSL napad SSL Strip POODLE Heartbleed TLS/SSL protocol attack SSL Strip Poodle Heartbleed true true false [T. Črnko] Slovenski jezik Angleški jezik Diplomsko delo/naloga 2019-09-24 08:43:01 2019-11-22 09:04:47 2022-08-09 10:01:10 2019-12-21 03:13:46 2019 0 Maribor 0 Maribor VIII, 38 str. 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 004.7.057.4(043.2) 22882326 URN:SI:UM:DK:YYPZC2D9 UN_Crnko_Tadej_2019.pdf UN_Crnko_Tadej_2019.pdf 1 214307DE7F2DEB7EE6DE269E8E41DE8B 8afa0becd598caca7b82b40c39a9efa3c952c55d0880821023a54bd16d3f843f 06fae80c-7c11-11eb-bb7a-00155d0001ca 20.500.12556/dkum/beef577d-fb3f-4d04-ba6f-4d81177f5d6f https://dk.um.si/Dokument.php?lang=slv&id=138483 Fakulteta za elektrotehniko, računalništvo in informatiko 0 0 0