Practical Attacks on Crypto Structures The SSL/TLS Case Itsik Mantin Technion Lecture

Practical Attacks on Crypto Structures The SSL/TLS Case - Itsik Mantin of Imperva at Technion-Israel Institute of Technology Technion Computer Engineering Center summer school 2014 Lecture
The Secure Socket Layer SSL and its successor Transport Layer Security TLS are probably the most popular cryptographic protocols in the world.
Over the last decade, a large number of attacks were discovered on TLS, showing practical ways to break the protocol and impersonate legitimate servers or steal secret data.
As opposed to most attacks on popular systems, many of the TLS attacks broke the cryptographic structures of the protocol, including the way it uses the Advanced Encryption Standard AES.
In the presentation I will explain how the BEAST, TIME, BREACH and other attacks work, and will try to answer the questions that bother many people in the web industry: 1 Why does TLS have so many vulnerabilities, and 2Should we expect more attacks to come.