Man in the Middle

where a host sits between two communicating nodes and transparently monitors capture and relay all communications between them.

​

A MitM may be able to change the messages exchanged between a sender and receiver without them realizing. To protect against this, senders and receivers must authenticate themselves and use encryption to validate messages.

​​Integrity Concern

Replay

where a host captures another host's response to some server and replays that response in an effort to gain unauthorized access.

Replay attacks often involve exploiting an access token generated by an application. The application needs to use encryption and time-stamping to ensure that the tokens cannot be misused.

​Integrity Concern

Impersonation

a common attack is where a person will attempt to figure out a password or other credentials to gain access to a host.

​

The attacker can then hijack the authorizations allocated to the account and generally masquerade as that user. There are numerous ways to perform impersonation attacks, but an obvious one is to capture password packets in transit and work out which bit the password is

​Integrity Concern

Availability

Availability means keeping a service running so that authorized users can access and process data whenever necessary. Availability is often threatened by accidents and oversights as well as active attacks.

​

Availability Concern

Availability Concerns- DOS

​•Denial of Service (DoS)—this is any situation where an attacker targets the availability of a service. A DoS attack might tamper with a system or try to overload it in some way.

On the web, a Distributed Denial of Service(DDoS) uses hosts compromised with bot malware to launch a coordinated attack against a web service. The size of the botnet determines how easily the attacker can overwhelm the service.

​

Availability Concern