SIT735 Network Security: Comodo Certificate Fraud Hack Analysis

This presentation provides an analysis of the Comodo certificate fraud hack that occurred in March 2011, focusing on the security risks it exposed and potential solutions. The hack involved the fraudulent issuance of nine SSL certificates across seven domains, leading to vulnerabilities such as man-in-the-middle attacks and potential compromise of personal data. The presentation discusses the importance of data encryption, the use of antivirus software, and the prevention of using personal devices for work to mitigate these risks. It emphasizes the need for secure digital certificate usage and proposes solutions to ensure safe online services and secure data exchange. The analysis concludes that by addressing these security vulnerabilities, organizations can protect themselves from similar threats and ensure the integrity of their online operations.

1
Network
Communication
Security

2
Introduction
 The purpose of the presentation is to
analyze the Comodo certificate fraud
hack and discuss the IT security risks an
organization is exposed to.
 In this context an organization is chosen
where a contractor is responsible for
maintaining a series of small business
clients receiving payments from
government organization

3
Comodo certificate fraud hack
 The certificate hack that occurred in
March 2011 unveiled a series of security
risks that an organization might be
exposed to [2].
 The certificate fraud involved issue of 9
fraudulent SSL certificates from 7
domains.

4
Cont..
 The issue of fraudulent certificate
imposed a number of security risks
including man in middle attack.
 The attack could be identified in March
15 and as soon as the hack was
detected, the fraudulently issued
certificates were revoked.

5
The Problem
 The problem was that the hacker could
gain an access to the username and
password of one of the officials thus
leading to the attack [4].
 Although a prompt action were taken,
the incident risked the personal data of
a number of users.

6
Security Risks
 One of the most significant security risk
associated with the incident is the risk
to personal data.
 Although the websites were prevented
in making use of fraudulently issued
certificates, the hack established the
fact that hackers make use of
sophisticated methods in launching the
attack.

7
Cont..
 The certificate fraud hack was critical
since the users visiting a secure website
feels free to share their personal details
[2].
 A fraudulently issued certificate
indicates a compromise with the
personal information of the users.

8
Cont..
 The attack establishes the fact that the
organization is exposed to a number of
data security risks [3].
 Since the organization involves in online
operation and transactions, it is exposed
to the risks such as phishing, man in the
middle attacks and so on.

9
Solutions
 In order to eliminate the security risks,
it is essential to ensure data encryption
in online operation.
 The use of antivirus and accurately
patched systems are recommended.
 Use of personal devices of the
employees should be prevented.

10
Justification
 The solutions proposed are justified as it
will ensure a safe use of the online
services and will enable a secure data
exchange.
 Apart from that it is essential to
enforced a more secure digital
certificate use so that it cannot be easily
tarnished or hacked.

11
Conclusion
 The Comodo certificate fraud hack is
evaluated in order to analyze the
different security risks a company is
exposed to.
 A number of solutions are proposed to
eliminate the causes of the data
security risks in the organization
chosen.

12
References
 [1]. Roosa, Steven B., and Stephen Schultze. "Trust
darknet: Control and compromise in the internet's
certificate authority model." IEEE Internet
Computing 17, no. 3 (2013): 18-25.
 [2]. Zetter, Kim. "DigiNotar files for bankruptcy in wake
of devastating hack." Wired magazine,
September (2011).
 [3]. Prins, J. Ronald, and Business Unit Cybercrime.
"Diginotar certificate authority breach’operation black
tulip’." Fox-IT, November (2011).
 [4]. LOO, Wai Sing. "Digital certificates: success or
failure?." (2017).