2 papers
cs.CR2018
Limitless HTTP in an HTTPS World: Inferring the Semantics of the HTTPS Protocol without Decryption
Blake Anderson, Andrew Chi, Scott Dunlop +1
We present new analytic techniques for inferring HTTP semantics from passive observations of HTTPS that can infer the value of important fields including the status-code, Content-T…
cs.CR2016
Server-side verification of client behavior in cryptographic protocols
Andrew Chi, Robert Cochran, Marie Nesfield +2
Numerous exploits of client-server protocols and applications involve modifying clients to behave in ways that untampered clients would not, such as crafting malicious packets. In…