DGLInfo: Web Spoofing: An Internet Con Game - Internet Security False Web Servers Attack

Web Spoofing
An Internet Con Game

The Department of Computer Science, Princeton University, recently released Technical Report 540-96, "Web Spoofing: An Internet Con Game."

The report, available at http://www.cs.princeton.edu/sip/, relates the potential security concerns of attackers who set up a "false" or "shadow copy" of the World Wide Web.

Rather than copying all web documents to a single server, it's possible for the attacker to funnel the victim's URL requests through the attacker's server, thus having access to both insecure and secure information and the ability to modify requested pages.

The paper includes reasonable actions to be taken to prevent and detect web spoofing attacks.

The paper is available in PostScript and MS Word formats.

For more information, read the Princeton University's "Safe Internet Programming" site at http://www.cs.princeton.edu/sip/.

DGL Information Services Note
A web spoofing site is open for testing at http://www.metahtml.com/apps/zippy/welcome.mhtml.

DGL publishes Training Express^tm brand computer learning guides in both print and electronic formats. Training Express guides are designed for the way we learn.

Did you know that DGL helps organizations make better use of the Internet? Instant Internet securely connects 50 LAN users to a single Internet access account, and our weekly website activity reports offer 14 pages of demographic information about visitors to your website. See our website for more information.

Advertising details for ITINFO and the DGL.com website, are on our advertising page.

DGL is committed to encouraging technical literacy.

ITINFO is an electronic publication of Damar Group, Ltd., publisher of Training Express computer learning guides. Comments and submissions to info@dgl.com.

Past issues are in the News & Tips section of the website.

updated December 25, 1996
http://dgl.com/dglinfo/1996/dg961220.html