Man-In-The-Middle Attack

• A Man-In-The-Middle attack is when an attacker is able to read, insert and modify at will, messages between two parties without either party knowing that the link between them has been compromised.

• The Man-In-The-Middle attack works easily on the key agreement protocol, when used without authentication.
  • A certifying authority can provide authentication.

• Man-In-The-Middle attacks may include one or more of the following:
  • Denial of service
  • Eavesdropping
  • Substitution

What is the key agreement protocol?

---

---

© 2006 John Michael Pierobon

Notes