Cookie-Proxy: A Scheme to Prevent SSLStrip Attack

Sendong Zhao, Ding Wang, Sicheng Zhao, Wu Yang, Chunguang Ma

Abstract: A new Man-in-the-Middle (MitM) attack called SSLStrip poses a serious threat to the security of secure socket layer protocol. Although some researchers have presented some schemes to resist such attack, until now there is still no practical countermeasure. To withstand SSLStrip attack, in this paper we propose a scheme named Cookie-Proxy, including a secure cookie protocol and a new topology structure. The topology structure is composed of a proxy pattern and a reverse proxy pattern. Experiment results and formal security proof using SVO logic show that our scheme is effective to prevent SSLStrip attack. Besides, our scheme spends little extra time cost and little extra communication cost comparing with previous secure cookie protocols.

External IDs:dblp:conf/icics/ZhaoWZYM12