Understanding Man-in-the-middle-attack through Survey of Literature

Abstract

These days cyberattack is a serious criminal offense and it is a hotly debated issue moreover. A man-in-the-middle-attack (MITM) is a kind of cyberattack where an unapproved outsider enters into an online correspondence between two users, remains escaped the two parties. The malware that is in the middle-attack often monitors and changes individual/classified information that was just realized by the two users. A man-in-the-middle-attack as a protocol is subjected to an outsider inside the system, which can access, read and change secret information without keeping any tress of manipulation. This issue is intense, and most of the cryptographic systems without having a decent authentication security are threatened to be hacked by the malware named MITM. This paper essentially includes the view of understanding the term of MITM; the current work is mainly emphasized to accumulate related data/information in a single article so that it can be a reference to conduct research further on this topic at college/undergraduate level. This paper likewise audits most cited research and survey articles on MITM recorded on 'Google Scholar'. The result showed that the MITM has correlation to the user behavior, in which this must be considered and careful understood for the way how to solve this problem. The motivation behind this paper is to help the readers for understanding and familiarizing the topic 'man-in-the-middle attack'.

Impact, Vulnerabilities, and Mitigation Strategies for Cyber-Secure Critical Infrastructure

“…There may be many objectives for an attack either using the data overheard for a subsequent action or changing the data before it reaches the other party. The attacker extracts information to be used in many ways: fraud, unapproved support exchanges, blackmail, credential theft, and spying [37].…”

“…A MITM attack intercepts the victim's activity through the attacker's system before it is routed to its intended destination. The attacker gains access to an unsecured network, often targeting networks in public areas such as Wi-Fi access points [37]. This provides the attacker with an avenue to deploy tools that intercept information between the victims, often targeting personal computers where their connection to websites is monitored.…”

“…This provides the attacker with an avenue to deploy tools that intercept information between the victims, often targeting personal computers where their connection to websites is monitored. This can result in credentials, financial details, and personally identifiable information being captured [37]. There are several types of MITM attacks, and the man-in-the-browser variant injects malicious software into the victim's computer or mobile device through phishing.…”

A Critical Overview of Industrial Internet of Things Security and Privacy Issues Using a Layer-Based Hacking Scenario

“…In this situation, the attacker discovers that the existing security controls provided by the CSP of Prime MotorX have not been correctly implemented, leading to vulnerabilities that grant unauthorized access to the processing layer's resources. One example is the attacker's use of a MITM attack [104] to intercept web traffic and access sensitive information within Prime MotorX's processing layer due to the lack of web traffic encryption. This attack can have severe consequences, enabling the attacker to obtain user credentials and sensitive corporate and customer data, potentially disrupting production or gaining control over Prime MotorX's entire IT environment.…”

Block-hash of blockchain framework against man-in-the-middle attacks

“…This attack is quite dangerous because the attacker can sniff the sent packet's information, potentially data hijacking [15]. MITM attacks are likely ball situations where two players intend to pass the ball to each other while one player between them tries to grab it [16]. MITM attacks focus on the information flowing between the endpoints, confidentiality, and the information's accuracy.…”