CHAPTER 6 - Man-in-the-Middle

Abstract

This chapter discusses Man-in-the-middle (MITM) attacks that are the act of unauthorized individuals or parties placing themselves in the path of a communication to eavesdrop, intercept, and possibly modify legitimate communications. It focuses how MITM attacks apply to computing resources. Man-in-the-middle (MITM) attacks are one of the most successful attack vectors for attackers. The overview of MITM attacks provide valuable information about how the attacks work and how they can be performed using various methods of attack. This allows administrators for security within their organizations to understand the threats that face the organization. It provides several options for administrators to consider when implementing controls to help reduce the likelihood of MITM attacks. Using defense-in-depth to protect the network at various levels is reviewed along with several recommendations for protecting against threats associated specifically with MITM attacks.