Intercepting Network Traffic of the Smart-ID Android Application
| dc.contributor.advisor | Paršovs, Arnis, juhendaja | |
| dc.contributor.author | Ilja, Kärt | |
| dc.contributor.other | Tartu Ülikool. Loodus- ja täppisteaduste valdkond | et |
| dc.contributor.other | Tartu Ülikool. Arvutiteaduse instituut | et |
| dc.date.accessioned | 2023-10-27T13:08:43Z | |
| dc.date.available | 2023-10-27T13:08:43Z | |
| dc.date.issued | 2020 | |
| dc.description.abstract | This thesis analyzes the technical means on how to monitor network communication between the Smart-ID Android application and the server. It gives an overview of the Smart-ID solution and then introduces the concept of man-in-the-middle attack used to intercept the traffic. To implement successful traffic interception attack, the certificate pinning mechanism had to be disabled in the Smart-ID application. This thesis provides step-by-step instructions on how to modify the Smart-ID application’s network security configuration and implement traffic interception using mitmproxy tool. Using the proposed methods network requests can be monitored to verify that no obvious personal data is being sent out from the user’s Android mobile device. | et |
| dc.identifier.uri | https://hdl.handle.net/10062/93811 | |
| dc.language.iso | eng | et |
| dc.publisher | Tartu Ülikool | et |
| dc.rights | openAccess | et |
| dc.rights | Attribution-NonCommercial-NoDerivatives 4.0 International | * |
| dc.rights.uri | http://creativecommons.org/licenses/by-nc-nd/4.0/ | * |
| dc.subject | Smart-ID | et |
| dc.subject | network interception | et |
| dc.subject | man-in-the-middle attack | et |
| dc.subject.other | bakalaureusetööd | et |
| dc.subject.other | informaatika | et |
| dc.subject.other | infotehnoloogia | et |
| dc.subject.other | informatics | et |
| dc.subject.other | infotechnology | et |
| dc.title | Intercepting Network Traffic of the Smart-ID Android Application | et |
| dc.type | Thesis | et |