david415 / HoneyBadger

Quantum Insert detector/recorder
GNU General Public License v3.0
305 stars 39 forks source link

make integration test for handshake hijack detection #10

Closed david415 closed 9 years ago

david415 commented 9 years ago

It is not possible to detect weather or not these TCP attacks are successful... but instead we are detecting the attack attempt. Therefore it is possible the handshakeHijacker tools to perform a manual test of the handshake hijack detection:

https://github.com/david415/HoneyBadger/blob/master/tools/handshakeHijacker.go

I'd like to write a fully automated integration test using this code... but have the client and server be established by the integration test. Of course the test should be performed on the loopback interface...

david415 commented 9 years ago

the unit tests are a reliable enough way to ensure honey badger detection works. integration tests seem mostly useful to prove to others that honey badger works. therefore these types of issues are very low priority compared with finishing all the core features of honey badger.