| fullrecord |
[{"key": "dc.contributor.advisor", "value": "Honkanen, Risto", "language": null, "element": "contributor", "qualifier": "advisor", "schema": "dc"}, {"key": "dc.contributor.author", "value": "Jokela, Tiina", "language": null, "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.date.accessioned", "value": "2024-09-18T04:49:32Z", "language": null, "element": "date", "qualifier": "accessioned", "schema": "dc"}, {"key": "dc.date.available", "value": "2024-09-18T04:49:32Z", "language": null, "element": "date", "qualifier": "available", "schema": "dc"}, {"key": "dc.date.issued", "value": "2024", "language": null, "element": "date", "qualifier": "issued", "schema": "dc"}, {"key": "dc.identifier.uri", "value": "https://jyx.jyu.fi/handle/123456789/97084", "language": null, "element": "identifier", "qualifier": "uri", "schema": "dc"}, {"key": "dc.description.abstract", "value": "Nykyp\u00e4iv\u00e4n\u00e4 yh\u00e4 useampi palvelu on digitalisaation kautta viety internetiin, jolloin on tarpeen siirt\u00e4\u00e4 HTTPS-protokollan avulla my\u00f6s arkaluontoista dataa, jota verkkorikollisetkin pyrkiv\u00e4t saamaan haltuunsa. Verkkorikollisten tavoitteena on selaimen ja palvelimen v\u00e4lisen salauksen poistaminen t\u00e4st\u00e4 datavirrasta. Opinn\u00e4ytety\u00f6ss\u00e4 selvitettiin, kuinka HTTPS-protokollaa vastaan voidaan hy\u00f6k\u00e4t\u00e4, ja kuinka n\u00e4it\u00e4 hy\u00f6kk\u00e4yksi\u00e4 vastaan voidaan suojautua. Lis\u00e4ksi tutkittiin penet-raatiotestimenetelmi\u00e4, sek\u00e4 millaisissa testiymp\u00e4rist\u00f6iss\u00e4 hy\u00f6kk\u00e4ysten suorittamista voidaan testata. \nTutkimuksessa l\u00e4hdettiin aluksi selvitt\u00e4m\u00e4\u00e4n, mill\u00e4 tavoin hy\u00f6kk\u00e4\u00e4j\u00e4 voi purkaa salauksen kah-den laitteen v\u00e4lilt\u00e4. T\u00e4m\u00e4n j\u00e4lkeen tutkittiin testiymp\u00e4rist\u00f6n tarpeita ja vaatimuksia sen rakenta-miseksi. Lopuksi testien suorittamisen j\u00e4lkeen etsittiin keinoja suojautua l\u00f6ydetyilt\u00e4 hy\u00f6kk\u00e4ys-menetelmilt\u00e4. Penetraatiotestauksesta kertovan kirjallisuuden ja tutkimusartikkelien avulla selvi-si, ett\u00e4 halutessaan poistaa salauksen kahden laitteen v\u00e4lisest\u00e4 tiedonsiirrosta, verkkorikolliset voivat suorittaa HTTPS- tai TLS- protokollan ns. downgrade-hy\u00f6kk\u00e4yksen. T\u00e4llaisessa hy\u00f6kk\u00e4yk-sess\u00e4 tavoitteena on protokollan version tai jonkin sen ominaisuuden heikommaksi alentaminen, jolloin tietyll\u00e4 haavoittuvuudella saadaan salaus purettua. Toinen menetelm\u00e4 on k\u00e4ytt\u00e4\u00e4 v\u00e4\u00e4ren-netty\u00e4 tai muulla tavoin laittomin keinoin haltuun saatua sertifikaattia. \nTestiymp\u00e4rist\u00f6ss\u00e4 suoritetuissa testeiss\u00e4 yritettiin poistaa salaus web-sivulta lomakkeessa l\u00e4he-tetyist\u00e4 kirjautumistunnuksista. Ensimm\u00e4inen testi sai salauksen purettua selaimen ja palveli-men v\u00e4lisest\u00e4 tiedonsiirrosta, mutta web-sivu ei latautunut selaimelle. Toisella, tehokkaammalla penetraatioty\u00f6kalulla saatiin salaus purettua osasta testitapauksia. Tulosten perusteella vaikut-taa silt\u00e4, ett\u00e4 suojauskeinona k\u00e4ytetyn HSTS-otsikkotiedot suojaavat puutteellisinakin, kunhan niihin on liitetty preload-direktiivi. Lopullista p\u00e4\u00e4telm\u00e4\u00e4 ei kuitenkaan voida tehd\u00e4, koska ei tiede-t\u00e4 mahdollisia muita sivuston k\u00e4ytt\u00e4mi\u00e4 suojausmenetelmi\u00e4.", "language": "fi", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted by jyx lomake-julkaisija (jyx-julkaisija.group@korppi.jyu.fi) on 2024-09-18T04:49:32Z\nNo. of bitstreams: 0", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Made available in DSpace on 2024-09-18T04:49:32Z (GMT). No. of bitstreams: 0", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.format.extent", "value": "97", "language": null, "element": "format", "qualifier": "extent", "schema": "dc"}, {"key": "dc.format.mimetype", "value": "application/pdf", "language": null, "element": "format", "qualifier": "mimetype", "schema": "dc"}, {"key": "dc.language.iso", "value": "fin", "language": null, "element": "language", "qualifier": "iso", "schema": "dc"}, {"key": "dc.rights", "value": "CC BY 4.0", "language": "en", "element": "rights", "qualifier": null, "schema": "dc"}, {"key": "dc.title", "value": "HTTPS-protokollan ohittaminen palvelimen ja selaimen v\u00e4lisess\u00e4 tiedonsiirtoyhteydess\u00e4", "language": null, "element": "title", "qualifier": null, "schema": "dc"}, {"key": "dc.type", "value": "master thesis", "language": null, "element": "type", "qualifier": null, "schema": "dc"}, {"key": "dc.identifier.urn", "value": "URN:NBN:fi:jyu-202409185959", "language": null, "element": "identifier", "qualifier": "urn", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Faculty of Information Technology", "language": "en", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Informaatioteknologian tiedekunta", "language": "fi", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "University of Jyv\u00e4skyl\u00e4", "language": "en", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": "fi", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Master's Degree Programme in Computer Science", "language": "en", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Tietojenk\u00e4sittelytieteen maisteriohjelma", "language": "fi", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.type.coar", "value": "http://purl.org/coar/resource_type/c_bdcc", "language": null, "element": "type", "qualifier": "coar", "schema": "dc"}, {"key": "dc.rights.copyright", "value": "\u00a9 The Author(s)", "language": null, "element": "rights", "qualifier": "copyright", "schema": "dc"}, {"key": "dc.rights.accesslevel", "value": "openAccess", "language": null, "element": "rights", "qualifier": "accesslevel", "schema": "dc"}, {"key": "dc.type.publication", "value": "masterThesis", "language": null, "element": "type", "qualifier": "publication", "schema": "dc"}, {"key": "dc.format.content", "value": "fulltext", "language": null, "element": "format", "qualifier": "content", "schema": "dc"}, {"key": "dc.rights.url", "value": "https://creativecommons.org/licenses/by/4.0/", "language": null, "element": "rights", "qualifier": "url", "schema": "dc"}]
|