Prevention Techniques for SSL Hacking Threats to E-Government Services

Since security threats increase over time, security of internet commination has to be achieved with cryptography and ciphering techniques. The use of SSL protocols secures our communication between intended hosts and clients. As a legislative requirement it is obligatory for all government organizations and e-government applications to use SSL secure socked layer which ensures encrypted information transmission. Without use of SSL anyone who captures the IP packet can observe the communication since communication channels transmit bare information. Whilst securing the communication preserves secrets, sometimes it threatens business, human rights and government sovereignty. Employees can transfer confidential data to third parties over a secure channel using their credentials and authorized certificates. Therefore to secure business and e-government, decryption of SSL is obligatory to detect malevolent users. Considering the ever widening usage of internet infrastructure for e-government services and e-government applications, securing sensitive and critical information from unauthorized and malicious parties via SSL protocols which are hardened against MITM attacks became a major concern. Furthermore, usage of blockchain technology and increasing volume of cryptocurrencies are some of other issues related to security of assets over internet. In this paper, we have surveyed the SSL hacking methods and prevention techniques to have a clear vision of threats and remedies. Since hacking have several stages from ARP poisoning to fake certificate, prevention techniques are focused on different levels.