Man in the Middle Attack: Focus on SSLStrip

Seminar paper from the year 2011 in the subject Computer Science - IT-Security, grade: none, East Carolina University, course: ICTN 4040 Communication Security, language: English, abstract: The topic discussed will be SSL Strip. This is a tool/software program that is used to perform man in the middle attacks against SSL enabled websites. In today's standards, SSL enabled websites are crucial to such things as banking institutions, or online shopping websites. In this paper, discussion will begin with how to use the tool as well as how to defend against the actual tool. Further discussion will build on the vulnerabilities that are exposed in this type of attack. Ending discussion will review the information discussed and offer additional insight into websites and their use of SSL.