Analysis of OpenSSL heartbleed vulnerability for embedded systems

17th IEEE International Multi Topic Conference: Collaborative and Sustainable Development of Technologies, IEEE INMIC 2014 - Proceedings

Volumn , Issue , 2014, Pages 314-319

  Ghafoor, Imran ^a   Jattalai, Imran ^b   Durrani, Shakeel ^c   Ch, Muhammad Tahir ^c  

^a NATIONAL UNIVERSITY OF SCIENCES AND TECHNOLOGY   (Pakistan)

^b ISRA UNIVERSITY   (Pakistan)

^c Horizon Technologies   (Pakistan)

Author keywords

[No Author keywords available]

Indexed keywords

INCANDESCENT LAMPS; INTERNET; MOBILE SECURITY; SECURE COMMUNICATION; SECURITY OF DATA;

CYBER SECURITY; DE FACTO STANDARD; EMBEDDED DEVICE; MEDICAL IMPLANT DEVICES; MEMORY BOUNDS; MEMORY UTILIZATION; SECURITY KEY; X.509 CERTIFICATES;

EMBEDDED SYSTEMS;

EID: 84988299334     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INMIC.2014.7097358     Document Type: Conference Paper

References (24)

1. D. Kushner, "The real story of stuxnet," Spectrum, IEEE, vo1.50, no.3, pp.48,53, March 2013.
2. R. Gandhi, A. Sharma, W. Mahoney, W. Sousan, Qiuming Zhu, and P Laplante, "Dimensions of Cyber-Attacks: Cultural, Social, Economic, and Political," IEEE Technology and Society Magazine, vo1.30, no.l, pp.28-38, Spring 20 II.
3. P. Katsumata, 1. Hemenway, and W. Gavins, "Cybersecurity risk management," MILITARY COMMUNiCATIONS CONFERENCE 2010- MILCOM 2010, pp.890-895, 31 Oct. -3 Nov. 2010.
4. Gold, S., "Android a secure future at last? [Communications Security]," Engineering & Technology, vol. 7, no.2, pp.50,54, March 2012.
5. Wheeler, David A, "Preventing Heartbleed," Computer , vol.47, no.8, pp.80,83, Aug. 2014.
6. Geer, D.E.; Kamp, P.-H., "Inviting More Heartbleed," Security & Privacy, IEEE, vol.12, no.4, pp.46,50, July-Aug. 2014 .
7. Gueron, S.; Krasnov, V., "The Fragility of AES-GCM Authentication Algorithm," Information Technology: New Generations (ITNG), 2014 11th International Conference on, vol., no., pp.333,337, 7-9 April 2014.
8. Li Gui-hong; Zheng Hua; Li Gui-zhi, "Building a Secure Web Server Based on OpenSSL and Apache," E-Business and E-Government (ICEE), 2010 International Conference on, vol., no., pp.1307,1310, 7-9 May 2010.
9. Wang Yanhua; Yang Kuihe; Zhang Yun, "Research and Realization of Security Proxy Based on SSL Protocol," Electronic Measurement and Instruments, 2007. ICEMI '07. 8th International Conference on , vol., no., pp.2-264,2-267, Aug. 16 2007-July 18 2007.
10. Zadeh, AA; Heys, H.M., "Theoretical simple power analysis of the grain stream cipher," Electrical and Computer Engineering (CCECE), 2013 26th Annual IEEE Canadian Conference on , vol., no., pp.I,5, 5-8 May 2013.
11. Queal, Zachary D. "Necessary Implementation of Adjustable Work Factor Ciphers in Modern Cryptographic Algorithms as it Relates to HeartBleed and OpenSSL." 2014.
12. Gujrathi, Siddharth. "Heartbleed Bug: AnOpenSSL Heartbeat Vulnerability." 2014.
13. Amann, Bernhard, et al. Revisiting SSL: A large-scale study of the internet's most trusted protocol. Technical report, ICSl, 2012.
14. Carvalho, M.; DeMott, 1.; Ford, R.; Wheeler, D.A, "Heartbleed 101," Security & Privacy, iEEE, vol. 12, no.4, pp.63,67, July-Aug. 2014.
15. Garber, Lee, "News Briefs," Computer , vol.47, no.6, pp.12,17, June 2014.
16. Momani, Eng Mohanned Hassan, and Adam Ali Zare Hudaib. "Comparative Analysis of Open-SSL Vulnerabilities & Heartbleed Exploit Detection." International Journal of Computer Science and Security (IJCSS) 2014.
17. Queal, Zachary D. "Necessary Implementation of Adjustable Work Factor Ciphers in Modern Cryptographic Algorithms as it Relates to HeartBleed and OpenSSL." 2014.
18. Seggelmann, R., M. Tuexen, and M. Williams. "Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension." I ETF drafiietf-tls-dtls-heartbeat-OO (June 2010) 2012.
19. Vaithianathan, T.; Haiyan Zhou; Hauer, J., "Wireless bi-directional data link for an EEG recording system using STM32," Medical Measurements and Applications (MeMeA), 2014 iEEE International Symposium on, vol., no., pp.I,5, 11-12 June 2014.
20. Hof, Hans-Joachim. "Practical limitations of technical privacy protection." Datenschutz und Datensicherheit-DuD 38.9 (2014): 601-605. 2014.
21. Lioupras, 10annis, and Eleni Manthou. "Don't let my Heart bleed!: An event study methodology in Heartbleed vulnerability case." 2014.
22. Heinzl, S.; Metz, C, "Toward a Cloud-Ready Dynamic Load Balancer Based on the Apache Web Server," Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), 2013 IEEE 22nd International Workshop on , vol., no., pp.342,345, 17-20 June 2013.
23. Sinha, T.; Rajasingh, I, "Investigating substructures in goal oriented online communities: Case study of Ubuntu IRC," Advance Computing Conference (IACC), 2014 IEEE International, vol., no., pp.916,922, 21-22 Feb. 2014.
24. Horvath, A, "The software package dependency networks of some Linux distributions," Nonlinear Science and Complexity (NSC), 20i 2 iEEE 4th International Conference on, vol., no., pp.235,238, 6-11 Aug. 2012.