Analyzing Computer Security: A Threat / Vulnerability / Countermeasure Approach

12. Disregard That Man behind the Curtain

Chapter Spotlight

• Man-in-the-middle attacks: in protocols, applications, and web interactions

• Reminders of vulnerabilities of trust, identification and authentication, access control, and software development

• Covert channels

• Steganography

Attack: Radar Sees Only Blue Skies 483

Threat: Man in the Middle 484

Threat: “In-the-Middle” Activity 487

Vulnerability: Unwarranted Trust 498

Vulnerability: Failed Identification and Authentication 499

Vulnerability: Unauthorized Access 501

Vulnerability: Inadequate Attention to Program Details 501

Vulnerability: Protocol Weakness 502

Countermeasure: Trust 503

Countermeasure: Identification and Authentication 503

Countermeasure: Cryptography 506

Related ...