Integrity check value, are you a spy? Information leakage attack on archive formats
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Kim, Donghyun | - |
dc.contributor.author | Jeong, Jongwook | - |
dc.contributor.author | Lee, Soo-Hyun | - |
dc.contributor.author | Kang, So Hyun | - |
dc.contributor.author | Lee, Youn Kyu | - |
dc.date.accessioned | 2024-07-22T02:30:26Z | - |
dc.date.available | 2024-07-22T02:30:26Z | - |
dc.date.issued | 2024 | - |
dc.identifier.issn | 2169-3536 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/hongik/handle/2020.sw.hongik/33385 | - |
dc.description.abstract | Existing archive formats provide encryption to protect data, but vulnerabilities in these formats can lead to data leakage. This study proposes a novel attack to leak original data from encrypted archive files by exploiting the integrity check value and unencrypted metadata. The proposed attack obtains the size of original data and the integrity check value by parsing the encrypted file, and identifies the original data by leveraging password cracking techniques. Experiments with seven archive formats and seven utilities demonstrate the effectiveness of our proposed attack, successfully leaking data from 11 out of 20 encrypted files. This research uncovers vulnerabilities in existing archive formats and contributes to the design of more secure archiving systems. Authors | - |
dc.format.extent | 1 | - |
dc.language | 영어 | - |
dc.language.iso | ENG | - |
dc.publisher | Institute of Electrical and Electronics Engineers Inc. | - |
dc.title | Integrity check value, are you a spy? Information leakage attack on archive formats | - |
dc.type | Article | - |
dc.publisher.location | 미국 | - |
dc.identifier.doi | 10.1109/ACCESS.2024.3416690 | - |
dc.identifier.scopusid | 2-s2.0-85196555415 | - |
dc.identifier.bibliographicCitation | IEEE Access, pp 1 - 1 | - |
dc.citation.title | IEEE Access | - |
dc.citation.startPage | 1 | - |
dc.citation.endPage | 1 | - |
dc.type.docType | Article in press | - |
dc.description.isOpenAccess | Y | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.subject.keywordAuthor | Archive file format | - |
dc.subject.keywordAuthor | archive utility | - |
dc.subject.keywordAuthor | Cryptography | - |
dc.subject.keywordAuthor | Data mining | - |
dc.subject.keywordAuthor | data security | - |
dc.subject.keywordAuthor | Dictionaries | - |
dc.subject.keywordAuthor | encrypted archive file | - |
dc.subject.keywordAuthor | Encryption | - |
dc.subject.keywordAuthor | file format analysis | - |
dc.subject.keywordAuthor | information leakage | - |
dc.subject.keywordAuthor | Information leakage | - |
dc.subject.keywordAuthor | Metadata | - |
dc.subject.keywordAuthor | Passwords | - |
dc.subject.keywordAuthor | side-channel attack | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
94, Wausan-ro, Mapo-gu, Seoul, 04066, Korea02-320-1314
COPYRIGHT 2020 HONGIK UNIVERSITY. ALL RIGHTS RESERVED.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.