A Snort-based Approach for Heartbleed Bug Detection

摘要

Heartbleed is a catastrophic bug in the OpenSSL which is a widely used implementation of the Transport Layer Security (TLS) protocol on the Internet. The Heartbleed bug which allows attackers to get sensitive information such as the secret keys, the user names, passwords and the actual content is a serious security threat to E-commerce. We proposed a Snort rule-based approach to detect the heartbleed bug. Experiment results show that the presented approach is suit for detecting the Heartbleed bug.