| 摘要(英) |
In recent decades, more and more applications use auto-upgrade mechanism to update their own program. Despite the fact that Auto-Upgrade mechanism make upgrade application simple and convenient for the end user, but few people concern about the security vulnerabilities when implementing such mechanism.
However, recently more and more cases shows up and suggest that the Auto-Upgrade mechanism is not as secure as we think. In this paper we shows that not only Auto-Upgrade mechanism has some critical security weaknesses, but the attacker can also use these security weaknesses to compromise the end users′ system. This kind of attack allows an attacker to install malicious software into victims system without the end user’s awareness.
Instead of using HTTPS to prevent this kind of attack, in this paper, we also recommended a defense mechanism approach which not only secure the Auto-Upgrade mechanism, but with much lower performance impact compare to HTTPS.
|
| 參考文獻 |
[1] Jared Newman. (2012, May 13). The Flame Virus: Your FAQs
Answered [Online]. Available:
http://www.pcworld.com/article/256508/the_flame_virus_your_faqs_answered.html
[2] Alexander Gostev. (2012, May 28). The Flame: Questions and Answers [Online]. Available:
https://securelist.com/blog/incidents/34344/the-flame-questions-and-answers-51/
[3] Lance Whitney. (2012, June 5). Flame Virus Can Hijack PCs by Spoofing Windows Update [Online]. Available:
http://www.cnet.com/news/flame-virus-can-hijack-pcs-by-spoofing-windows-update/
[4] Symantec Security Response. (2012, June 4). W32.Flamer: Microsoft Windows Update Man in the Middle [Online]. Available: http://www.symantec.com/connect/blogs/w32flamer-microsoft-windows-update-man-middle
[5] Lance Whitney. (2012, June, 4). Flame virus spread through rogue Microsoft security certificates [Online]. Available:
http://www.cnet.com/news/flame-virus-spread-through-rogue-microsoft-security-certificates/
[6] Patrick Barker. (2015, June 26). Samsung Deliberately Disabling Windows Update the Way the User Intends it to [Online]. Available:
http://bsodanalysis.blogspot.co.uk/2015/06/samsung-deliberately-disabling-windows.html
[7] Dan Seifert. (2015, June 26). Samsung to stop disabling Windows Update in ‘a few days’ [Online]. Available:
http://www.theverge.com/2015/6/26/8854761/samsung-to-stop-disabling-windows-update-in-a-few-days
[8] Vlad Savov. (2015, June 25). Samsung angers Microsoft by disabling Windows Update on some of its computers [Online]. Available:
http://www.theverge.com/2015/6/25/8844819/samsung-disable-windows-update-exe
[9] Emil Protalinski. (2015, June 26). Samsung will patch its software to stop disabling Windows Update ‘within a few days’ [Online]. Available:
http://venturebeat.com/2015/06/26/samsung-will-patch-its-software-to-stop-disabling-windows-update-within-a-few-days/
[10] The Internet Engineering Task Force, RFC 5246, 2008
[11] William Stallings, “Key Management and Distribution,” in Cryptography and Network Security Principles and Practice, 5th ed. PEARSON, 2010, ch. 14, sec. 5, pp461-463
[12] The Internet Engineering Task Force, RFC 5280, 2008
[13] Windows Authenticode Portable Executable Signature Format, 2nd ed, Microsoft Co., Washington, U.S, 2008
[14] Microsoft PE and COFF Specification, 8th ed, Microsoft Co., Washington, U.S, 2013
[15] The Internet Engineering Task Force, RFC 2315, 1998
[16] Cristian Coarfa [three or more authors: Cristian Coarfs et al.], Performance Analysis of TLS Web Server, ACM Transactions on Computer Systems, vol. 24, p. 36-69, 2006
|
[Endnote RIS 格式]
[相關文章]
[文章引用]
[完整記錄]
[館藏目錄]
[檢視]
plurk
funp
live
udn
HD
myshare
netvibes
friend
youpush
delicious
baidu
Google bookmarks
del.icio.us
hemidemi
facebook
twitter
google
reddit