Questions tagged [protocols]

A description and set of rules for the ordered exchange of structured information designed with the goal of protecting the security of the system.

Filter by
Sorted by
Tagged with
0
votes
2answers
140 views

Would my protocol be safe?

Suppose I have a protocol like the one below between users A and B; -A sends random nonce G1 to B -B sends back hash_k(G1) and random none G2 -A verifies hash_k(G1), then sends back hash_k(G1 | ...
0
votes
2answers
121 views

Impossible to make connections through closed ports?

If you have closed all your ports on your internet protocol, you cannot make a connection to that internet protocol. So how do attackers (DoS or any other means that need a connection) make a ...
0
votes
1answer
1k views

A no-login approach to authenticating a certain device, MAC-Address as password?

I have created a REST api, and now i'm thinking about authentication. I want the mobile application's flow for the user to be very simple: only having to enter a username and then this username ...
0
votes
1answer
1k views

Is it safe not to encrypt ping packets?

I am running encrypted communication with ping tacked on after decryption and deserialization is complete. I.e. incoming data -> split into packets -> decrypt -> deserializer -> actual message or ...
0
votes
1answer
51 views

Is there such a thing as an Authenticated Protocol?

I need two devices to communicate in plain sight and I want to know what to ask for. Nothing is secret so no need to encrypt. However, I need the source to be authenticated to prevent bad actors from ...
0
votes
1answer
48 views

Trustable Sources For Security Algorithms and Standards?

I am learner of cryptographic algorithms and security standards. I usually Google it to understand the basics of the algorithm or the protocol, and to find an implementation of a protocol. However I ...
0
votes
1answer
753 views

Using OpenAppID without Snort [closed]

Cisco Security introduced open source application detection and control mechanism which called "OpenAppID". Which can be checked in the link Lets say I have a sniffer application for myself; if I ...
0
votes
1answer
101 views

Is it possible to become infected with virus, trojan or malware by browsing the infected sites or running installation .exe?

I am quite paranoid and I am always afraid that when i accidentally open some infected sites it would run scripts that automatically download malwares, viruses and trojans into my pc and run by ...
0
votes
1answer
142 views

In Real-Time, where do we deploy Extensible Authentication Protocol(EAP) in Wireless Networks?

I have heard that the EAP protocol has authentication capabilities for wireless networks too. But I am not able to get how it is deployed in real time as I know that whenever I need to connect to my ...
0
votes
1answer
787 views

TLS1.0 to TLS1.2 (Browser vs Registry)

Question How does TLS protocol differ on registry and browser level? Context Many companies are migrating from protocol TLS1.0 (disabling this) to TLS1.2 (enabling it). I'm not sure how this ...
0
votes
2answers
697 views

SSL session protocol vs SSL connection protocol

Slide 8, SSL Session Protocol: Slide 10, SSL connection protocol: Firstly, in Session Protocol, there is a {S}_B, what is the function of this {S}_B? Does't it help in proving Alice's identity? Is ...
0
votes
2answers
161 views

Challenge authentication without roundtrip

Is it possible to have a secure challenge/response authentication protocol, authenticated immediately? Too slow: a client request -> server challenge -> client response -> server response Fast ...
0
votes
1answer
146 views

Security Protocol Notation Editor [closed]

Are there any editors or tools that support the secure protocol notation?
0
votes
1answer
42 views

How to interpet RFC data format

I'm having slight problems reading the used format in an Internet-Draft: TokenBindingProtocol#Section6 here enum { provided_token_binding(0), referred_token_binding(1), (255) } TokenBindingType; ...
0
votes
1answer
91 views

Basis Authentication Protocol: a concrete attack

Below is an informal protocol narration of a simple authentication protocol. A sends to B a signed hash of message M, B's name and a nonce N. B knows that the message M is intended for him, that it ...
0
votes
1answer
714 views

How to extract the top-level of protocols into the csv file by using tshark command?

Here is what I tried: tshark -r test.pcap -T fields -e ip.proto > output.csv But this can only show all the protocols in the csv files. I want to show only the top level of protocol numbers such as ...
0
votes
3answers
2k views

China CCTV System UDP protocol isn't working

My boss is trying to invest on a CCTV solution that he orders from China, his idea is to market it here after we fine tune the process and configuration and make a few tweaks of our own. It consists ...
0
votes
3answers
497 views

What service could penetrate my Firewall via UDP on Port 17275?

Has anyone monitored various requests from all over the world on Port 17275 via UDP? My firewall logs show huge amounts of such requests from lots of different IP Adresses. I can't find any ...
0
votes
1answer
447 views

Amazon S3 Encrypted File Backup System

I am designing my backup system to Amazon S3 (probably Singapore) and I would like to have all my files strongly encrypted on the server. I use ArchLinux x64. My system will append only once an ...
0
votes
0answers
53 views

Is this symmetric key system secure?

I am creating a secure network data transfer system, and would like to know if there are any obvious flaws in this scheme. Secrets The secret is a password that is known to both clients. This ...
0
votes
1answer
68 views

Thought process on Network Protocol Attack

I'm preparing for an introductory information security examination in university and this is one of the tutorial question on Network Protocol attacks. I tried (a) and came to this conclusion: Since ...
0
votes
0answers
44 views

Why is TLS called application-level protocol? [duplicate]

I read this paragraph from rabbitmq networking page: Clients communicate with RabbitMQ over the network. All protocols supported by the broker are TCP-based. Both RabbitMQ and the operating system ...
0
votes
0answers
30 views

Secure Peer-to-Peer Multicast Communication?

The problem: A single broadcaster needs to send a series of messages through a peer-to-peer mesh network such that only specific other pre-approved nodes can read them. The set of authorized receivers ...
0
votes
0answers
74 views

In Kerberos authentication protocol, why is the TGT encrypted using the user's key Ka?

When the user first logs in, he fetches his TGT from the KDC along with the session key. I get why Sa (session key) is encrypted with Ka (user's key). But why is TGT also encrypted with Ka. TGT is ...
0
votes
1answer
50 views

Security element that relate to breaking protocol

I am working on evaluating an unsecure protocol. I am trying to categorize the vulnerabilites according to some commonly accepted security elements like the ones specified in the CIA triad or the ...
0
votes
1answer
196 views

How are USSD messages used and who could send them?

Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree). There is a Wikipedia ...
0
votes
1answer
248 views

What does a secure path mean?

I saw it in a slide for Mark Stamp. He says: "Authentication on a stand-alone computer is relatively simple: 1) For example, hash a password with a salt. 2) “Secure path,” attacks on ...
0
votes
1answer
48 views

Process of finding device hostnames on LAN

Is there a reliable way to retrieve hostnames from LAN devices without having to install extra software or performing nmap-style OS fingerprinting? I'm ideally looking for either a protocol that has ...
0
votes
2answers
818 views

What should I know to prevent relay attack on NFC?

I am doing thesis on "NFC relay attack" in my BSc last year. I have studied 10-15 papers and learned the basics of NFC and relay attack. Still I am no where near to understand how relay attack is ...
0
votes
1answer
123 views

Does it make sense to have something similar to IPSec at the data link layer?

We currently have security protocols for the application layer (e.g. S-HTTP, DNSSec, PGP, etc.), the transport layer (e.g. SSH, TLS, SSL, etc.) and the network layer (e.g. IPSec). Does it make sense ...
0
votes
1answer
163 views

Is there security in the 1-wire protocol?

I know that the 1-wire protocol has a slower communication and that it can be physically accessible and there other ways to get the information from the data bus. I can't seem to find much ...
0
votes
0answers
86 views

How to update a non clientUpdateProhibited domain name?

So I recently learned about domain name locking after having found the *.co domains of a top web site weren’t protected against server and client updating/transfering. (while the .co tld offers all ...
0
votes
0answers
68 views

Ensure that a file can only be decrypted after a specific condition is not present

Are there any cryptographic schemes/protocols that would allow me to encrypt a file, make it publicly available, but ensure that it can only be decrypted when a specific condition is not present (I ...
0
votes
1answer
37 views

Evaluation keyexchange for automation [closed]

Target: Secure communication between server S and Master M Server S executes script downloaded from Master M (securely) Problem: Small footprint - use existing software (base install of a ...
0
votes
0answers
231 views

Payment Application Integration - Encryption or HMAC

Doing an integration with an online payment provider. Payment provider will be making a web request to my server to provide some information about the basket content. On my end there's no payment ...
0
votes
1answer
658 views

Can firewalls detect and block outgoing by protocol [duplicate]

Or specifically, what can be done to detect or block the following (other than closing port 443)? If this is something that can or cannot be done based on the specific hardware used, please provide ...
-1
votes
1answer
42 views

How to connect to external address as other outgoing port number without proxy [closed]

Is it possible to (mask / define) outgoing port locally on network without using a proxy? default (outgoing protocol) [address] [port] set to (outgoing protocol) [address] [selected port] There ...
-1
votes
1answer
2k views

What is the meaning of “www-ssl” in the URL https://www-ssl.intel.com/? [closed]

While browsing INTEL website I came across the following link https://www-ssl.intel.com/content/www/in/en/data-center/new-center-of-possibility.html?cid=sem63p45119g-c&intel_term=intel%...
-1
votes
2answers
134 views

What is the best formal method to prove the privacy (anonymity) of a security protocol

I am studying about TOR. I require to formally verify that the involved protocols provide anonymity. However, I could not find a suitable formalism of anonymity. If there exist any formulation/...
-1
votes
1answer
61 views

What are the flaws in this security protocol between client and server? [closed]

Here is my security protocol for the use of a service provided by server. It utilises a symmetric key: Client requests to use a service Server sends back nonce Client sends back nonce encrypted with ...
-1
votes
1answer
82 views

How to restrict my PC to browsing only for security reasons? [closed]

I have a PC that i only use for browsing the web. I do not have any problem with disabling any other services/protocols that does not affect web browsing. I want to disable these unnecessary services (...
-1
votes
1answer
155 views

Map of Protocols to Encryption/Cipher Suite

I am looking for a mapping of all protocols (HTTPS, SCP, SFTP, LDAP, RDP, ect) along with the Encryption Protocols that can be used with them (SSH, SSL/TLS, ect) and if possible their Cipher Suites (...
-1
votes
2answers
62 views

technical difference between TLS and a certificate [duplicate]

I don't quite understand what the difference is between TLS and a certificate. TLS secures the transmission by encrypting the data. So normally no man in the middle attack is possible and nobody else ...
-2
votes
1answer
593 views

Is rolling your own network protocol insecure? [closed]

By now, everyone on here should know that rolling your own crypto is bad. But what's about rolling your own (encryption supporting) network protocol? I'm working on an open-source project (by now it'...
-2
votes
1answer
286 views

Is it possible to build unbreakable Protocol Obfuscation? [closed]

Using Protocol Obfuscation some internet protocols have tried to evade traffic shaping. BitTorrent supports Protocol Obfuscation for instance. Is it possible to build unbreakable Protocol Obfuscation?...
-3
votes
2answers
256 views

Understanding a key establishment protocol

I'm studying a one-pass key establishment protocol. Let be A client and B the Server. A sends to B: E_w(t,b,k) where t is a timestamp requested for freshness, k is the ephemeral key that will be ...
-4
votes
2answers
273 views

Problem with Encryption Protocol

I have a question about a encryption protocol, if it is good or not. Bob and Alice communicate over an insecure channel( a possible attacker can listen). An expert suggests the following protocol to ...
-4
votes
1answer
407 views

What are the best tools available in order to reverse engineer a communication protocol? [closed]

What are the best tools available in order to reverse engineer a communication protocol?
-6
votes
1answer
427 views

LTE Security: What kind of cryptograpy could be used to fix layer 2? [closed]

New attacks on LTE: https://thehackernews.com/2018/06/4g-lte-network-hacking.html https://www.alter-attack.net/media/breaking_lte_on_layer_two.pdf Layer two (data link) does not guarantee the ...
-8
votes
5answers
255 views

Is SSL more secure than encoding?

I am writing a client / server program pair. I have established my own protocol and am communicating with TCP. Presently, when the client messages the server, it adds 42 to each byte (looping, 127 + 1 ...

1 2 3 4 5 6