Alice and Bob, who the FOCI are they?: Analysis of end-to-end encryption in the LINE messaging application
Alice and Bob, who the FOCI are they?: Analysis of end-to-end encryption in the LINE messaging application
复制标题
Alice 和 Bob，他们的 FOCI 是谁？：LINE 消息应用程序中端到端加密的分析
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Andrew Hilts
中科院分区：
文献类型：
--
作者：
Antonio M. Espinoza;William J. Tolley;Jedidiah R. Crandall;Masashi Crete;Andrew Hilts
端到端加密(E2EE)正在成为许多流行聊天应用程序的标准功能，但对这些实现的独立安全评估有限。在本文中，我们对亚洲市场流行的消息传递应用程序Line的E2EE特性进行了fi第一次独立分析，并确定了重放攻击和缺乏前向保密性的攻击。基于我们对漏洞的分析和与LINE的沟通，我们讨论了挑战和新的研究方向，以更好地连接供应商，研究人员
End-to-end encryption (E2EE) is becoming a standard feature in many popular chat apps, but independent security assessments of these implementations are limited. In this paper we provide the first independent analysis of E2EE features in LINE, a messaging application popular in Asian markets, and identify a replay attack and an attack on a lack of forward secrecy. Based on our analysis and communications with LINE about the vulnerabilities we discuss challenges and new research directions to better bridge vendors, researchers
DOI：
10.1109/sp.2017.65
发表时间：
2017-05
期刊：
2017 IEEE Symposium on Security and Privacy (SP)
影响因子：
--
作者：
Ruba Abu-Salma;M. Sasse;Joseph Bonneau;A. Danilova;Alena Naiakshina;Matthew Smith
通讯作者：
Ruba Abu-Salma;M. Sasse;Joseph Bonneau;A. Danilova;Alena Naiakshina;Matthew Smith