On-path Attacks

Question 1

What is an On-path Attack?

Answer 1

An attack where the attacker positions their workstation logically between two hosts during communication

Question 2

What is ARP Poisoning?

Answer 2

Manipulating Address Resolution Protocol (ARP) tables to redirect network traffic

Question 3

What is DNS Poisoning?

Answer 3

Attacker corrupts the DNS cache so users are redirected to a malicious IP (e.g., fake banking site).

Question 4

What is a Rogue Wireless Access Point?

Answer 4

Creating a fake wireless access point to intercept traffic

Question 5

What is a Rogue Hub or Switch?

Answer 5

Introducing a malicious hub or switch to capture data on a wired network

Question 6

What is a Replay Attack?

Answer 6

Occurs when an attacker captures valid data and then replays it immediately or with a delay

Question 7

What is a Relay Attack?

Answer 7

Occurs when attackers insert themselves in between two hosts and become part of the conversation in order to read or modify communications

Question 8

What is SSL Stripping?

Answer 8

An attack that tricks the encryption application into presenting an HTTP connection instead of HTTPS in order for attackers to capture unencrypted data

Question 9

What is a Downgrade Attack?

Answer 9

An attacker forces a client or server to abandon a higher security mode in favor of a lower security mode