Talk:Man-in-the-middle attack

From Citizendium
Revision as of 05:59, 15 October 2008 by imported>Howard C. Berkowitz (Starting comments)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
This article is developing and not approved.
Main Article
Discussion
Related Articles  [?]
Bibliography  [?]
External Links  [?]
Citable Version  [?]
 
To learn how to update the categories for this article, see here. To update categories, edit the metadata template.
 Definition An attack on a communications system in which the attacker deceives the communicating parties so they both talk to him while believing they are talking to each other. [d] [e]
Checklist and Archives
 Workgroup categories Mathematics, Computers and Military [Categories OK]
 Subgroup category:  Security
 Talk Archive none  English language variant Canadian English

Some things needed

Definitely, some sourcing, and some specific examples, are needed. As the creator, you get to assign the language variant. A definition will be needed.

While it is possible to go to approval without all links being blue, it helps to minimize them. Definitely, the crypto-specific terms used in the definition, such as active attack, need definitions. You may want to have some graphics explaining the sequence; while the article itself is very much in draft, look at Domain Name System security for examples of showing how threats build up, or a simpler step-by-step in anycast -- they are in a PowerPoint file if you'd like it as a template.

Especially when devices such as ATM switches or routers are in the path, and themselves may not run any of the crypto, you need to show how the flow goes to a proxying man-in-the-middle box.

Howard C. Berkowitz 10:59, 15 October 2008 (UTC)