Verification of OpenSSL version via hardware performance counters

James Bruska; Zander Blasingame; Chen Liu

doi:10.1117/12.2263029

2 May 2017 Verification of OpenSSL version via hardware performance counters

James Bruska, Zander Blasingame, Chen Liu

Proceedings Volume 10206, Disruptive Technologies in Sensors and Sensor Systems; 102060A (2017) https://doi.org/10.1117/12.2263029
Event: SPIE Defense + Security, 2017, Anaheim, CA, United States

Abstract

Many forms of malware and security breaches exist today. One type of breach downgrades a cryptographic program by employing a man-in-the-middle attack. In this work, we explore the utilization of hardware events in conjunction with machine learning algorithms to detect which version of OpenSSL is being run during the encryption process. This allows for the immediate detection of any unknown downgrade attacks in real time. Our experimental results indicated this detection method is both feasible and practical. When trained with normal TLS and SSL data, our classifier was able to detect which protocol was being used with 99.995% accuracy. After the scope of the hardware event recording was enlarged, the accuracy diminished greatly, but to 53.244%. Upon removal of TLS 1.1 from the data set, the accuracy returned to 99.905%.

Conference Presentation

Citation Download Citation

James Bruska, Zander Blasingame, and Chen Liu "Verification of OpenSSL version via hardware performance counters", Proc. SPIE 10206, Disruptive Technologies in Sensors and Sensor Systems, 102060A (2 May 2017); https://doi.org/10.1117/12.2263029

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available