Lecture

Man in the Middle: Capsule gagnante

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Description

This lecture covers the concept of Man in the Middle attacks, focusing on the interception of communication in public WiFi hotspots. Starting with a scenario involving Julie, Marc, and Clara at Starbean, the instructor explains the principles, objectives, and techniques of such attacks. Various methods like rogue access points and ARP spoofing are discussed, highlighting real-world examples of espionage incidents. Defensive strategies for individuals and businesses are also presented, emphasizing the importance of avoiding sensitive data transmission on public networks and implementing secure browsing practices. The lecture concludes by stressing the limitations of technical security solutions and warning against the risks of using public WiFi networks for cost-saving purposes.

Official source

Related concepts (30)

Internet security

Internet security is a branch of computer security. It encompasses the Internet, browser security, web site security, and network security as it applies to other applications or operating systems as a whole. Its objective is to establish rules and measures to use against attacks over the Internet. The Internet is an inherently insecure channel for information exchange, with high risk of intrusion or fraud, such as phishing, online viruses, trojans, ransomware and worms.

Network security

Network security consists of the policies, processes and practices adopted to prevent, detect and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, which is controlled by the network administrator. Users choose or are assigned an ID and password or other authenticating information that allows them access to information and programs within their authority.

Security

Security is protection from, or resilience against, potential harm (or other unwanted coercion) caused by others, by restraining the freedom of others to act. Beneficiaries (technically referents) of security may be of persons and social groups, objects and institutions, ecosystems or any other entity or phenomenon vulnerable to unwanted change. Security mostly refers to protection from hostile forces, but it has a wide range of other senses: for example, as the absence of harm (e.g.

National security

National security, or national defence, is the security and defence of a sovereign state, including its citizens, economy, and institutions, which is regarded as a duty of government. Originally conceived as protection against military attack, national security is widely understood to include also non-military dimensions, such as the security from terrorism, minimization of crime, economic security, energy security, environmental security, food security, and cyber-security.

ARP spoofing

In computer networking, ARP spoofing, ARP cache poisoning, or ARP poison routing, is a technique by which an attacker sends (spoofed) Address Resolution Protocol (ARP) messages onto a local area network. Generally, the aim is to associate the attacker's MAC address with the IP address of another host, such as the default gateway, causing any traffic meant for that IP address to be sent to the attacker instead. ARP spoofing may allow an attacker to intercept data frames on a network, modify the traffic, or stop all traffic.

Related lectures (64)

Media Security Standards

Explores the definition of media security standards and the standardization of a framework rather than a specific security tool.

SCION: Next-Generation Internet Security

Presents SCION, a highly secure and efficient next-generation internet architecture with a focus on security and efficiency.

Redox Reactions: Half-Reactions, Potentials, and Applications

Explores redox reactions, electrode potentials, and their practical uses in electrochemistry.

Engineering Multi-Scale Systems: Nano-Tera 2016

Explores engineering multi-scale systems for health, security, energy, and the environment, focusing on innovations from labs to daily life.

Conditional Access II