[B! TLS] teddy-gã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

teddy-g id:teddy-g

TLSã«é–¢ã™ã‚‹teddy-gã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

è§£èª¬ï¼SPDYã‹ã‚‰é€²åŒ–ã‚’é‚ã’ãŸHTTP/2ã®æ¦‚è¦ã¨ç‰¹å¾´ | ã‚µã‚¯ãƒ©ã‚µã‚¯ã®SEOã€SEOå¯¾ç–ãƒ»ã‚³ãƒ³ãƒ†ãƒ³ãƒ„åˆ¶ä½œãªã‚‰ã€‘ ã‚ã£ï¼ã‚µã‚¯ãƒ©ã‚µã‚¯ã«ç›¸è«‡ã—ã‚ˆã†
æœ€è¿‘ã€Googleã®HTTP/2ã«å¯¾ã™ã‚‹é–¢å¿ƒãŒé«˜ããªã£ã¦ã„ã‚‹ã‚ˆã†ã«æ„Ÿã˜ã¾ã™ã€‚ ä»¥å‰ã€ŒChromium Blogã€ã§HTTP/2ã¸ã®ç§»è¡Œã«é–¢ã™ã‚‹å…¬å¼ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã‚‚ã‚ã‚Šã¾ã—ãŸãŒã€Google ChromeãŒç€ã€…ã¨HTTP/2ã¸ã®å¯¾å¿œã‚’é€²ã‚ã¦ã„ã¾ã™ã€‚å…¬å¼ã‚¢ãƒŠã‚¦ãƒ³ã‚¹å½“åˆã€Chrome ã‹ã‚‰å‚ç…§ã•ã‚Œã¦ã„ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã® 25% ä»¥ä¸ŠãŒ HTTP/2 ã§æä¾›ã•ã‚Œã¦ã„ã‚‹ã€ã¨ã•ã‚Œã¦ã„ã¾ã—ãŸã®ã§ã€ç¾åœ¨ã§ã¯ã•ã‚‰ã«å¤šãã®å‰²åˆã‚’å ã‚ã¦ã„ã‚‹ã‚‚ã®ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ ä»Šå›žã¯ã€ã“ã®ã‚ˆã†ãªæµã‚Œã‚’è¸ã¾ãˆã€HTTP/2ã®æ¦‚è¦ã«ã¤ã„ã¦ã”ç´¹ä»‹ã—ã¾ã™ã€‚ ï¼ˆå‚è€ƒï¼‰Transitioning from SPDY to HTTP/2ï¼ˆHTTP/2ã¸ã®ç§»è¡Œã«é–¢ã™ã‚‹å…¬å¼ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ï¼‰ ã€ŽSEOä¼šç¤¾ãŒä½œã£ãŸã€SEOãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ147é¸-è‡ªç¤¾ã‚µã‚¤ãƒˆã®ã‚„ã‚‹ã¹ãSEOæ–½ç–ä¸€è¦§-ã€ Googleã®æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³æœ€é©åŒ–ï¼ˆSEOå¯¾ç–ï¼‰ã‚’åŠ¹æžœçš„ã«å®Ÿæ–½ã™ã‚‹ãŸã‚ã®åŒ…æ‹¬çš„ãªãƒ
teddy-g 2018/02/18
HTTP/2ã®ã‚µãƒžãƒªãƒ¼ã€‚å‚™å¿˜ã¾ã§ã€‚

http2.0

http

https

TLS

SSL
ãƒªãƒ³ã‚¯
RFC 8744: Issues and Requirements for Server Name Identification (SNI) Encryption in TLS
teddy-g 2018/02/10
TLS1.3ã®è©±ã®ä¸ã§ã€SNIã‚’æš—å·åŒ–ã™ã‚‹ã¨ã„ã†è©±ã€‚ã“ã‚Œã‚ˆã‚Šå‰ã«DPRIVEã‚’å®Ÿç¾ã—ãªã„ã¨ã„ã‘ãªã„ã—ã€SNIæš—å·åŒ–ã§DDoSã¨ã‹Gatewayã‚’ä¹—ã£å–ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ãŒå¢—ãˆã‚‹ã¨ã„ã†è©±ã‚‚ã‚ã‚‹ã€‚

TLS

encryption

security

cybersecurity

ieee
ãƒªãƒ³ã‚¯
DNS PRIVate Exchange (dprive)
Charter for Working Group The DNS PRIVate Exchange (DPRIVE) Working Group develops mechanisms to provide confidentiality to DNS transactions in order to address concerns surrounding pervasive monitoring (RFC 7258). The set of DNS requests that an individual makes can provide an attacker with a large amount of information about that individual. DPRIVE aims to deprive the attacker of this informatio
teddy-g 2018/02/10
TLS1.3ã®ãƒ‡ã‚£ã‚¹ã‚«ãƒƒã‚·ãƒ§ãƒ³ã®ä¸ã§ã€DNSã‚¯ã‚¨ãƒªã¨ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’æš—å·åŒ–ã™ã‚‹ã¨ã„ã†è©±ã€‚ DPRIVEã¨ç§°ã•ã‚Œã¦ã‚‹ã€‚

TLS

encryption

security

cybersecurity

ieee
ãƒªãƒ³ã‚¯
TLS Fingerprinting - a method for identifying a TLS client without decrypting | DevCentral
teddy-g 2018/02/10
TLS Fingerprintingã‚’ç”¨ã„ã¦UAã‚’æŽ¨æ¸¬ã§ãã‚‹ã¨ã„ã†è©±ã€‚Masaryk Universityã®ç ”ç©¶ã«è¿‘ã„ã‹ã€‚

TLS

encryption

machine learning

machinelearning

security

cybersecurity

threats
ãƒªãƒ³ã‚¯
User agent information from HTTPS flow
teddy-g 2018/02/04
æš—å·åŒ–é€šä¿¡ã®ä¸ã‹ã‚‰UAã‚’èªã‚€ã“ã¨ã¯ã§ãã¾ã™ã‹ï¼Ÿã§ãã¾ã›ã‚“ï¼ã¨ã„ã†ã‚„ã‚Šã¨ã‚Šã€‚

SSL

TLS

cybersecurity

security

encryption
ãƒªãƒ³ã‚¯
Qualys SSL Labs - Projects / HTTP Client Fingerprinting Using SSL Handshake Analysis
teddy-g 2018/02/04
SSL/TSLãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã®ãƒ‡ãƒ¼ã‚¿ã‚’å¤§é‡ã«é›†ã‚ã€ClietHelloã‹ã‚‰User-Agentã‚’æŽ¨æ¸¬ã§ãã‚‹ã‚ˆã†ã«ã—ã‚ˆã†ï¼ã¨ã€‚

SSL

TLS

encryption

security

cybersecurity
ãƒªãƒ³ã‚¯
Detecting Encrypted Malware Traffic (Without Decryption)
Security Detecting Encrypted Malware Traffic (Without Decryption)7 min read Blake Anderson Introduction Over the past 2 years, we have been systematically collecting and analyzing malware-generated packet captures. During this time, we have observed a steady increase in the percentage of malware samples using TLS-based encryption to evade detection. In August 2015, 2.21% of the malware samples use
teddy-g 2017/08/22
æš—å·åŒ–é€šä¿¡ã‹ã‚‰ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’è¦‹ã¤ã‘å‡ºã™æ‰‹æ³•ã«ã¤ã„ã¦ã€‚ github/joyå«ã‚å‚è€ƒè³‡æ–™å¿…è¦‹ã€‚

cybersecurity

encryption

TLS

SSL

malware
ãƒªãƒ³ã‚¯
TLS Fingerprinting - Stealthier Attacking & Smarter Defending - Derbyâ€¦
teddy-g 2017/03/31
ã‚„ã¯ã‚Šãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã‚’ã†ã¾ãä½¿ã†ã¨æ”»æ’ƒã‚’è¦‹ã¤ã‘ã‚‰ã‚Œã‚‹ã£ã½ã„ã®ã ãŒã€‚

cybersecurity

encryption

https

TLS

SSL

hacks
ãƒªãƒ³ã‚¯
HTTPS and the TLS handshake protocol.
teddy-g 2017/03/26
HTTPS ã®TLSãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã«ã¤ã„ã¦ã®èª¬æ˜Žã€‚ç°¡æ½”ã€‚

http

https

SSL

TLS

encryption

internet
ãƒªãƒ³ã‚¯
1