Implementing HTTPS is a complex process encompassing technical and human factors,with a significant reliance on the webmaster’s expertise.Although various evaluation methods have been proposed in the scientific liter...Implementing HTTPS is a complex process encompassing technical and human factors,with a significant reliance on the webmaster’s expertise.Although various evaluation methods have been proposed in the scientific literature to address HTTPS deployment challenges,including vulnerabilities related to X.509 certificate fields,cipher suites,mixed content,encryption libraries,and the behaviors of users and webmasters,there remains a lack of a comprehensive methodology that integrates these metrics into a unified framework.To address this gap,this paper introduces a novel hybrid assessment methodology that combines three main cybersecurity assessment techniques:examination,testing,and interviewing.The methodology is further enhanced by integrating K-Means clustering with Large Language Model(LLM)reasoning to interpret interview-based insights and uncover behavioral patterns.It evaluates 12 critical security measures and mechanisms essential for robust HTTPS deployment.The effectiveness of the proposed methodology is demonstrated through a case study analyzing the security posture of HTTPS-secured websites across five domains:e-commerce,e-finance,education,government,and e-newspapers.The obtained results prove the applicability of the methodology in real-world scenarios and offer actionable insights for practitioners and researchers.In addition,the generated dataset of findings provides a comprehensive overview of the analyzed HTTPS website’s security levels and establishes a valuable foundation for future research to improve HTTPS implementation.展开更多
由于通航申报信息属于航运的核心数据资产,必须确保其数据安全。针对当下传输加密敏感性不足、信息量丢失过大的问题,开展基于超文本传输安全协议(hypertext transfer protocol secure,HTTPS)和映射混沌算法的信息交互传输研究。该研究...由于通航申报信息属于航运的核心数据资产,必须确保其数据安全。针对当下传输加密敏感性不足、信息量丢失过大的问题,开展基于超文本传输安全协议(hypertext transfer protocol secure,HTTPS)和映射混沌算法的信息交互传输研究。该研究首先基于HTTPS建立通航申报信息加密传输通道,再将通航申报信息分割为前景和背景部分,选择两种不同的混沌系统分别实施混沌映射加密。结果表明:经本研究方法加密后,明文敏感性相对更大、信息熵差值相对更小,基于HTTPS协议和映射混沌算法的信息交互传输加密效果更好。展开更多
摘要Implementing HTTPS is a complex process encompassing technical and human factors,with a significant reliance on the webmaster’s expertise.Although various evaluation methods have been proposed in the scientific literature to address HTTPS deployment challenges,including vulnerabilities related to X.509 certificate fields,cipher suites,mixed content,encryption libraries,and the behaviors of users and webmasters,there remains a lack of a comprehensive methodology that integrates these metrics into a unified framework.To address this gap,this paper introduces a novel hybrid assessment methodology that combines three main cybersecurity assessment techniques:examination,testing,and interviewing.The methodology is further enhanced by integrating K-Means clustering with Large Language Model(LLM)reasoning to interpret interview-based insights and uncover behavioral patterns.It evaluates 12 critical security measures and mechanisms essential for robust HTTPS deployment.The effectiveness of the proposed methodology is demonstrated through a case study analyzing the security posture of HTTPS-secured websites across five domains:e-commerce,e-finance,education,government,and e-newspapers.The obtained results prove the applicability of the methodology in real-world scenarios and offer actionable insights for practitioners and researchers.In addition,the generated dataset of findings provides a comprehensive overview of the analyzed HTTPS website’s security levels and establishes a valuable foundation for future research to improve HTTPS implementation.
摘要由于通航申报信息属于航运的核心数据资产,必须确保其数据安全。针对当下传输加密敏感性不足、信息量丢失过大的问题,开展基于超文本传输安全协议(hypertext transfer protocol secure,HTTPS)和映射混沌算法的信息交互传输研究。该研究首先基于HTTPS建立通航申报信息加密传输通道,再将通航申报信息分割为前景和背景部分,选择两种不同的混沌系统分别实施混沌映射加密。结果表明:经本研究方法加密后,明文敏感性相对更大、信息熵差值相对更小,基于HTTPS协议和映射混沌算法的信息交互传输加密效果更好。