English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

TLS protocol is an essential part of secure Internet communication. In past,many attacks have been identified on the protocol. Most of these attacks aredue to flaws in protocol implementation. The flaws are due to improper designand implementation of program logic by programmers. One of the widely usedimplementation of TLS is SChannel which is used in Windows operating systemsince its inception. We have used protocol state fuzzing to identify vulnerableand undesired state transitions in the state machine of the protocol forvarious versions of SChannel. The client as well as server components have beenanalyzed thoroughly using this technique and various flaws have been discoveredin the implementation. Exploitation of these flaws under specific circumstancesmay lead to serious attacks which could disrupt secure communication. In thispaper, we analyze state machine models of TLS protocol implementation ofSChannel library and describe weaknesses and design flaws in these models,found using protocol state fuzzing.

Identification of Bugs and Vulnerabilities in TLS Implementation for Windows Operating System Using State Machine Learning