Asymmetric Man-in-the-Middle Traffic Recordation via DLL Injection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing application sharing protocols face challenges in bypassing authentication mechanisms and recording communication traffic due to security measures like TLS and CredSSP, which prevent man-in-the-middle services from intercepting and re-encrypting data, making it difficult to perform test script generation.
Innovation Solution
An asymmetric-man-in-the-middle implementation module injects a dynamic-link library into the application sharing protocol client and server to alter API calls, implement TLS and CredSSP authentication, and redirect communication through a local server, allowing data recording and test script generation by bypassing authentication mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TLS and CredSSP authentication mechanisms are implemented in application sharing protocols, then security is improved, but the ability to intercept and record communication traffic deteriorates
Solution Approach 1:
The patent introduces a man-in-the-middle service as an intermediary component that sits between the application sharing protocol client and server. This service implements its own TLS and CredSSP authentication mechanisms, allowing it to intercept, decrypt, and record communication traffic while maintaining the appearance of secure authentication. The intermediary enables traffic capture without compromising the overall security architecture by implementing authentication at the interception point.
2Productivity
If man-in-the-middle services are used to record communication traffic, then test script generation capability is improved, but authentication security deteriorates
Solution Approach 1:
The man-in-the-middle service acts as a mediator that implements authentication mechanisms (TLS and CredSSP) to bypass security restrictions while enabling traffic recording for test script generation. By positioning itself as an authenticated intermediary, it can capture traffic without compromising the authentication security of the overall system, as it maintains valid authentication credentials.
Solution Approach 2:
The patent segments the authentication process into separate components: the man-in-the-middle service implements its own authentication module that handles TLS and CredSSP separately from the main application sharing protocol. This segmentation allows the authentication mechanism to be bypassed at the recording layer while maintaining security at the application layer, enabling test script generation without compromising authentication integrity.
3Adaptability or versatility
If dynamic-link library injection is used to alter API calls, then traffic redirection capability is improved, but system complexity deteriorates
Solution Approach 1:
The dynamic-link library serves as an intermediary layer that injects into the application sharing protocol client to alter API calls. This intermediary approach enables traffic redirection capability by intercepting system calls at the API level and redirecting them through the man-in-the-middle service, while encapsulating the complexity within the DLL rather than requiring complex system-wide modifications.
Data Source
AI summary
In some examples, with respect to asymmetric-man-in-the-middle capture based application sharing protocol traffic recordation, a dynamic-link library that alters application programming interface calls with respect to communication between an application sharing protocol client and an application sharing protocol server may be injected into the application sharing protocol client. Based on the injected dynamic-link library, data from the communication between the application sharing protocol client and the application sharing protocol server may be ascertained. Further, based on the ascertained data, a test script may be generated to test operation of an application associated with the communication between the application sharing protocol client and the application sharing protocol server.