417Unique Challenges in WiFi Intrusion Detection
17.2.3.3 MITM
A MITM (man-in-the-middle) attack begins with one of either a rogue or soft AP and attempts to
have a client connect before routing the trafc back to the original AP through the attacker, shown
in Figure 17.6. The attacker can then monitor all the actions of the client and uncover passwords,
personal or banking details, or redirect trafc. This is most commonly performed in WiFi networks
through an ARP (address resolution protocol) poisoning attack. ARP poisoning operates by sending
faked ARP packets to the AP and the client with the aim of poisoning each node into believing that
the attacker is the other device within the network.
17.3 THE EFFECT OF DEPLOYMENT ARCHITECTURE ON ...