THIS SITE

Information for

MASc Seminar: Randomized Lempel-Ziv Compression for Anti-Compression Side-Channel AttacksExport this event to calendar

Tuesday, November 14, 2017 — 1:00 PM EST

Candidate: Meng Yang

Title: Randomized Lempel-Ziv Compression for Anti-Compression Side-Channel Attacks

Supervisor(s): Gong, Guang

Abstract:  Security experts confronts new attacks on TLS/SSL every year. Ever since the compression side-channel attacks CRIME and BREACH were presented during security conferences in 2012 and 2013, online users connecting to HTTP servers that run TLS version 1.2 are susceptible of being impersonated. We set up three Randomized Lempel-Ziv Models, which are built on Lempel-Ziv77, to fight against this attack. Our three models change the deterministic characteristic of the compression algorithm: each compression with the same input gives output of different lengths. After performing a compression side-channel attack simulation, all three models successfully prevented the attack. However, we demonstrate that our randomized models can still be broken by a stronger version of compression side-channel attack after performing simulation.

But this latter attack has a greater time complexity and is easily detectable. Finally, from the results, we conclude that our models couldn't compress as well as Lempel-Ziv77, but they can be used against compression side-channel attacks.

Location 
EIT - Centre for Environmental and Information Technology
Room 3142
200 University Avenue West
Kitchener, ON N2L 3G1
Canada

S M T W T F S
29
30
31
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
1
2
  1. 2017 (192)
    1. November (13)
    2. October (6)
    3. September (17)
    4. August (17)
    5. July (33)
    6. June (15)
    7. May (23)
    8. April (28)
    9. March (17)
    10. February (10)
    11. January (13)
  2. 2016 (242)
    1. December (11)
    2. November (17)
    3. October (11)
    4. September (21)
    5. August (27)
    6. July (54)
    7. June (13)
    8. May (20)
    9. April (22)
    10. March (18)
    11. February (6)
    12. January (22)
  3. 2015 (242)
  4. 2014 (268)
  5. 2013 (192)
  6. 2012 (31)