Man-in-the-middle attack in wireless and computer networking — A review
Abstract
One of the most discussed attacks in computer security is Man-In-The-Middle attack and it is a serious concern for many security professionals. The attackers target the actual data flowing between the endpoints and also compromise the integrity and confidentiality of the data. Adversary can compromise the confidentiality by eavesdropping and the integrity by message modification by communication interception. Adversary can also intercept, modify or destroy the messages to cause end of communication for one of the parties thereby leading to compromise of availability issue. In this paper, we present an extensive review on MITM to categorize and analyse the MITM attacks scope. We considered OSI reference model and two basic networking technologies such as GSM and UMTS. MITM attacks are classified based on various parameters such as attacker location, impersonation techniques and nature of channel. The existing countermeasures are surveyed. The paper categorize MITM attacks into four categories namely spoofing based MITM, TLS/SSL MITM, BGP MIT M and false base station based MITM attack. Finally we present prevention mechanisms for all such attacks and also identify few future research directions.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Federated multi-task learning handles statistical and system challenges of FL like high communication costs, stragglers, and fault tolerance.
“Federated multi-task learning [116]- [119] handles statistical and system challenges of FL like high communication costs, stragglers, and fault tolerance.”
From Vulnerabilities in federated learning (2021) · cites this paper as [117]
Cites
Park, K., & Lee, H. (2001) · ACM SIGCOMM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM) · doi:10.1145/383059.383061 · Cited by 577 · see citing works
Pi: a path identification mechanism to defend against DDoS attacks
Yaar, A., Perrig, A., & Song, D. X. (2004) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/secpri.2003.1199330 · Cited by 418 · see citing works
Listen and whisper: security mechanisms for BGP
Subramanian, L., Röth, V., Stoica, I. G., Shenker, S. J., & Katz, R. H. (2004) · Cited by 216 · see citing works
Park, K., & Lee, H. (2001) · ACM SIGCOMM Computer Communication Review · doi:10.1145/964723.383061 · Cited by 207 · see citing works
S-ARP: a secure address resolution protocol
Bruschi, D., Ornaghi, A., & Rosti, E. (2004) · Annual Computer Security Applications Conference · doi:10.1109/csac.2003.1254311 · Cited by 179 · see citing works
Accurate Real-time Identification of IP Prefix Hijacking
Hu, X. Y., & Mao, Z. M. (2007) · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · doi:10.1109/sp.2007.7 · Cited by 172 · see citing works
Passport: Secure and Adoptable Source Authentication
Liu, X., Li, A., Yang, X., et al. (2008) · Cited by 159 · see citing works
CoDNS: improving DNS performance and reliability via cooperative lookups
Park, K., Pai, V. S., Peterson, L., et al. (2004) · Cited by 127 · see citing works
An Analysis on the Schemes for Detecting and Preventing ARP Cache Poisoning Attacks
Abad, C. L., & Bonilla, R. I. (2007) · International Conference on Distributed Computing Systems Workshops · doi:10.1109/icdcsw.2007.19 · Cited by 118 · see citing works
Enhanced ARP: preventing ARP poisoning-based man-in-the-middle attacks
Nam, S. Y., Kim, D., & Kim, J. (2010) · IEEE Communications Letters · doi:10.1109/lcomm.2010.02.092108 · Cited by 107 · see citing works
Securing BGP — A Literature Survey
Huston, G., Rossi, M., & Armitage, G. J. (2010) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2011.041010.00041 · Cited by 107 · see citing works
A Centralized Monitoring Infrastructure for Improving DNS Security
Antonakakis, M., Dagon, D., Luo, X., et al. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-15512-3_2 · Cited by 51 · see citing works
Tripunitara, M., & Dutta, P. (2003) · Annual Computer Security Applications Conference · doi:10.1109/csac.1999.816040 · Cited by 49 · see citing works
DepenDNS: Dependable Mechanism against DNS Cache Poisoning
Sun, H., Chang, W.-H., Chang, S.-Y., et al. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-10433-6_12 · Cited by 31 · see citing works
Network Security Management Using ARP Spoofing
Kwon, K., Ahn, S., & Chung, J. W. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24707-4_18 · Cited by 28 · see citing works
DHCP server authentication using digital certificates
Dinu, D. D., & Togan, M. (2014) · International Conference on Communications (COMM) · doi:10.1109/iccomm.2014.6866756 · Cited by 21 · see citing works
ASA: agent-based secure ARP cache management
Oh, M., Kim, Y., Hong, S., et al. (2012) · IET Communications · doi:10.1049/iet-com.2011.0566 · Cited by 21 · see citing works
Antidotes for DNS Poisoning by Off-Path Adversaries
Herzberg, A., & Shulman, H. (2012) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2012.27 · Cited by 19 · see citing works
Defense against DNS Man-In-The-Middle Spoofing
Bai, X., Hu, L. Q., Song, Z., et al. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-23971-7_39 · Cited by 9 · see citing works
IP prefix hijacking detection using the collection of as characteristics
Hong, S.-C., Hong, J. W., & Ju, H. (2011) · Asia-Pacific Network Operations and Management Symposium (APNOMS) · doi:10.1109/apnoms.2011.6077014 · Cited by 7 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Vulnerabilities in federated learning
Bouacida, N., & Mohapatra, P. (2021) · IEEE Access · doi:10.1109/access.2021.3075203 · Cited by 248 · see citing works
A Survey of Privacy Risks and Mitigation Strategies in the Artificial Intelligence Life Cycle
Shahriar, S., Allana, S., Hazratifard, S. M., & Dara, R. (2023) · IEEE Access · doi:10.1109/access.2023.3287195 · Cited by 114 · see citing works
- Authors
- Bhushan, B., Sahoo, G., & Rai, A. K.
- Affiliations
- Birla Institute of Technology, Mesra (IN)
- Venue
- 2017 3rd International Conference on Advances in Computing,Communication & Automation (ICACCA) (Fall)
- Publisher
- IEEE
- Published
- 2017-09
- Pages
- 1-6
- OpenAlex
- W2798334860
- Cited by
- 128
- References
- 20
- Citations by year
- 2026: 6 · 2025: 24 · 2024: 18 · 2023: 24 · 2022: 20 · 2021: 13 · 2020: 10 · 2019: 10 · 2018: 3
- FWCI
- 5.01
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Conference on Advances in Computing, Communication & Automation (ICACCA) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Computer Networks and Communications › Security in Wireless Sensor Networks
- Physical Sciences › Computer Science › Computer Networks and Communications › Cybersecurity and Information Systems
- Keywords
- man-in-the-middle attacks, wireless network security, network security, eavesdropping, data integrity, confidentiality, spoofing attacks, SSL/TLS, BGP, GSM, UMTS, OSI model, attack classification, countermeasures
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
