A cautionary note on automatic proxy configuration

Proceedings of the IASTED International Conference on Communication, Network, and Information Security

Volumn , Issue , 2003, Pages 153-158

  Pashalidis, Andreas ^a  

^a UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

Authentication; Proxy based attack; Web proxy; Web security; Web spoofing

Indexed keywords

AUTHENTICATION; PROXY-BASED ATTACK; WEB PROXY; WEB SECURITY; WEB SPOOFING;

AUTOMATION; COMPUTER SYSTEM FIREWALLS; DATA PRIVACY; INTRANETS; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC;

INTERNET;

EID: 2642545716     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (15)

1. Netscape, http://wp.netscape.com/eng/mozilla/2.0/relnotes/demo/proxy- live.html. Navigator Proxy Auto-Config File Format, March 1996.
2. Paul Gauthier, Josh Cohen, Martin Dunsmuir, and Charles Perkins. Internet Draft: Web Proxy Auto-Discovery Protocol (work in progress). Internet Engineering Task Force, November 2000.
3. R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, and T. Berners-Lee. RFC 2616: Hypertext Transfer Protocol - HTTP/1.1 Internet Engineering Task Force, June 1999.
4. R. Droms. RFC 2131: Dynamic Host Configuration Protocol. Internet Engineering Task Force, March 1997.
5. E. Guttman, C. Perkins, J. Veizades, and M. Day. RFC 2608: Service Location Protocol, Version 2. Internet Engineering Task Force, June 1999.
6. J. Veizades, E. Guttman, C. Perkins, and S. Kaplan. RFC 2165: Service Location Protocol. Internet Engineering Task Force, June 1997.
7. CERT Coordination Center (CERT/CC). Vulnerability Note VU#457875, December 2002.
8. A. Gulbrandsen, P. Vixie, and L. Esibov. RFC 2782: A DNS RR for specifying the location of services (DNS SRV). Internet Engineering Task Force, February 2000.
9. P. Mockapetris. RFC 1035: Domain names - implementation and specification. Internet Engineering Task Force, November 1987.
10. Microsoft. Microsoft Security Bulletin (MS99-054), December 1999.
11. Stephen A. Thomas. HTTP Essentials: Protocols for Secure, Scaleable Web Sites. John Wiley & Sons, 2001.
12. E. W. Felten, D. Balfanz, D. Dean, and D.S. Wallach. Web spoofing: An internet con game. In Proceedings of the 20th National Information Systems Security Conference, pages 95-103, Baltimore, Maryland, October 1997.
13. E. Ye, Y. Yuan, and S.W. Smith. Web Spoofing Revisited: SSL and Beyond. Technical Report TR2002-417, Dartmouth College, 2002.
14. S. McLeod and M. Cohen. SSL vulnerabilities. In Australian Computer Emergency Response Team (AusCERT) conference 2002, May 2002.
15. Donald Eastlake. RFC 2535: Domain Name System Security Extensions. IBM, March 1999.