Power of MITM

1
Power of MITM

• Men In the Middle, Simple but critical issue.

2
Spoofing? What is it??

• Spoofing ?(?) ??(??) , ???.
• Men In the Middle Attack Spoofing? ??? ???? ??,
  ???? ???? ??? ?????? ?? ???? ??, ??? ?? ??.
• Sniffing?? ???

3
- Sniffing
SERVER
- Spoofing
Im your Server!
Okay!
SERVER
4
ARP Spoofing

• ARP Spoofing victim?? attacker? IP? router?? ??
  Broadcast.-gt victim? in/out ?? ?? ??? attacker??
  ??.

YES
5
?? ??? ????

• ???? ??/??
• Fishing Site? Redirecting
• ??? ?? (SSL,TLS ?)
• APT

6
?? 1(DNS Spoofing)
7
?? 2(SSL break)
8
???
???

• ??? ?? ?? ??? ?? ? ??.
• Packet capture? ?? ?? ??? ??? ????? ???.
• ??? ????? ??? ?? ????? ???? ??.

• ?? Router? MAC address ? static?? ???? ??.
• ???/??? ?? ???? ?? Anti-ARP Spoofing ??? ??? ???.
• ???? ?? ARP reply? ????? ???? ??.

9
Q A
10
?????.