In the current cyberspace, the TLS/SSL certificate system is a fundamental cryptographic system for all HTTPS communication. However several flaws in the TLS/SSL certificate system create space for various bogus activities. Attackers are taking advantage of certificate authorities which do not hesitate to issue possible fraudulent certificates hence allowing them various phishing and malicious activities. On the other hand, there exist several projects which are trying to help fixing flaws in the certificate system. The goal of this task is to create a system that will be able to find possible bogus certificate issuers and identify possible phishing or generally malicious activities by leveraging data from public database. Certificate Transparency project provided by Google (https://www.certificate-transparency.org/ ) and Project Sonar maintained by Rapid7 (https://sonar.labs.rapid7.com/ ) are great starting points. On top of that combination with passive DNS data might be worth of checking (https://www.farsightsecurity.com/faq/#q8).

Preferably the solution should be provided in Python, C++ or C#

This research will be co-supervised by two technical consultant, including external support from an industrial partner - ESET.