Man-in-the-Middle: Vulnerabilities in SSH/Public Key

Home
SSH Charter | Eclipse | SSHTools | JPcap |
XPerts @ SCE | Carleton University
subglobal4 link | subglobal4 link | subglobal4 link | subglobal4 link | subglobal4 link | subglobal4 link | subglobal4 link
subglobal5 link | subglobal5 link | subglobal5 link | subglobal5 link | subglobal5 link | subglobal5 link | subglobal5 link
subglobal6 link | subglobal6 link | subglobal6 link | subglobal6 link | subglobal6 link | subglobal6 link | subglobal6 link
subglobal7 link | subglobal7 link | subglobal7 link | subglobal7 link | subglobal7 link | subglobal7 link | subglobal7 link
subglobal8 link | subglobal8 link | subglobal8 link | subglobal8 link | subglobal8 link | subglobal8 link | subglobal8 link

Vulnerabilities in Public Key Encryption

Photo my Randehay from deviantArt. Thank you. http://www.deviantart.com/deviation/11567623/

The threat of tapping

This is the 4th year project page for Jesse Pool, and Hubert Sugeng. We are both 4th year undergraduate students in Systems and Computer Engineering (SCE).

This project is devoted to demonstrating a weakness in public key encryption to an active sniffer in the form of a man-in-the-middle style attack, which essentially "taps" the connection of a machine and allows the attacker to view the contents of future encrypted sessions.

This project will have a working demonstration. One of the goals will be to develop working man-in-the-middle software to demonstrate that this threat is real over the Internet. As well, further topics may be discussed on possibilities of countering and/or detecting this type of attack.

For this project, we are working under XPerts @ SCE which is headed by Professor Pearce at Carleton University in Ottawa, Ontario, Canada.

 

 


About Us | Site Map | Contact Us | ©2004 Jesse Pool and Hubert Sugeng