January 2021
Intermediate to advanced
547 pages
12h 4m
Chinese
Content preview from 网络安全评估（第三版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
360
｜
第
11
章
TIME
注
34
TIME
以
HTTP
压缩为目标，但不需要网络访问来利用。在恶意
JavaScript
被注入浏览器后，对手可以通过监视对特定位置使用的选择明文值的响应
逐字节推断秘密（例如，会话令牌值）。在将
HTTP
响应与
MTU
边界对齐时，
使用定时侧信道。
RC4
字节偏差（
CVE-2013-2566
）
注
35
RC4
算法有许多字节偏差，当多次加密相同的明文并监控密文时，对手可
以使用这些偏差来恢复已知位置的明文字节（例如
cookie
中的会话令牌）。
攻击需要生成非常大的数据量。因此，这有点不切实际，但突出了
RC4
中的一个重大缺陷。
不安全的重新协商（
CVE-2009-3555
）
如图
11-8
所示，
TLS
端点可能支持不安全的重新协商，使得具有网络访
问权限的攻击者可以用自己的（例如恶意
HTTP
请求）为从客户端到服务
器的合法会话流量加前缀。根据应用程序的配置，这可能导致
HTTPS
到
HTTP
降级或恶意命令被处理。
不安全回退
过时的客户端支持不安全的回退，具有网络访问权限的攻击者可以利用该
回退将会话降级到
TLS 1.0
或
SSL 3.0
。
IETF
通过引入一个新的密码套件
（
TLS_FALLBACK_SCSV
）
注
36
来解决这个问题，该套件可以防止支持密码
的
TLS
实现降级。
TLS
实现缺陷
表
11-5
列出了
TLS
和
DTLS
库中可利用的重大缺陷。存在许多证书验证和拒
注 34： Tal Be
’
ery and Amichai Shulman, “A Perfect CRIME? Only TIME ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.