Integrity check value, are you a spy? Information leakage attack on archive formatsopen access
- Authors
- Kim, Donghyun; Jeong, Jongwook; Lee, Soo-Hyun; Kang, So Hyun; Lee, Youn Kyu
- Issue Date
- 2024
- Publisher
- Institute of Electrical and Electronics Engineers Inc.
- Keywords
- Archive file format; archive utility; Cryptography; Data mining; data security; Dictionaries; encrypted archive file; Encryption; file format analysis; information leakage; Information leakage; Metadata; Passwords; side-channel attack
- Citation
- IEEE Access, pp 1 - 1
- Pages
- 1
- Journal Title
- IEEE Access
- Start Page
- 1
- End Page
- 1
- URI
- https://scholarworks.bwise.kr/hongik/handle/2020.sw.hongik/33385
- DOI
- 10.1109/ACCESS.2024.3416690
- ISSN
- 2169-3536
- Abstract
- Existing archive formats provide encryption to protect data, but vulnerabilities in these formats can lead to data leakage. This study proposes a novel attack to leak original data from encrypted archive files by exploiting the integrity check value and unencrypted metadata. The proposed attack obtains the size of original data and the integrity check value by parsing the encrypted file, and identifies the original data by leveraging password cracking techniques. Experiments with seven archive formats and seven utilities demonstrate the effectiveness of our proposed attack, successfully leaking data from 11 out of 20 encrypted files. This research uncovers vulnerabilities in existing archive formats and contributes to the design of more secure archiving systems. Authors
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - ETC > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/hongik/handle/2020.sw.hongik/33385)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.