WebApp Sec mailing list archives
RE: Security tool for monitoring HTTPS traffic?
From: Yoram Zahavi <YoramZ () gilian com>
Date: Wed, 10 Mar 2004 11:19:03 +0200
One way around that is to is to have a sniffer-based device that is capable of SSL traffic decryption without the need to perform SSL termination (i.e. a proxy based solution). In this case, a server's private key is loaded into the device, which allows the reconstruction of decrypted plain text. SSL handshake, client/server key exchange, and SSL session reuse are passively monitored to allow the decryption process. This approach was implemented within Gilian's application IDS, which analyzes the decrypted text and learns user and application behaviors, so it is capable of identifying application attacks or unexpected application reply and information disclosure. Yoram Zahavi R&D Team Leader Gilian Technologies Tel: 972-9-9560036 x240 Fax: 972-9-9565668 www.gilian.com -----Original Message----- From: Andreas Fredrich [mailto:andreas.fredrich () avinci de] Sent: Tuesday, February 24, 2004 4:56 PM To: webappsec () securityfocus com Subject: Security tool for monitoring HTTPS traffic? I have a similar question too! Are they products they can look inside HTTPS traffic? Some customers doesn't trust HTTPS traffic going inside the company over the proxy! For example, I have heard that a combination of squid and apache configuraion can do these, but I have never seen it. Every information will help me! Mit freundlichen Gruessen/ Best Regards/ Avec meilleures salutations A. Fredrich
Current thread:
- RE: Security tool for monitoring HTTPS traffic?, (continued)
- RE: Security tool for monitoring HTTPS traffic? John Reilly (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? dd (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? Glyn (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? Satish Chandra Prasad (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? John Floyd (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? Imre Kertesz (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? lists AT dawes DOT za DOT net (Feb 28)
- Re: Security tool for monitoring HTTPS traffic? Gary Flynn (Feb 28)
- Re: Security tool for monitoring HTTPS traffic? Imre Kertesz (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? John Reilly (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? najeeb . hatami (Feb 28)
- RE: Security tool for monitoring HTTPS traffic? Amichai Shulman (Mar 07)
- RE: Security tool for monitoring HTTPS traffic? Yoram Zahavi (Mar 10)
- Re: Security tool for monitoring HTTPS traffic? Romain Vergniol (Mar 10)
- RE: Security tool for monitoring HTTPS traffic? David Wong (Mar 10)