Man-in-the-Middle Attack
What is Man-in-the-Middle Attack?
An attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other. MITM attacks can intercept sensitive data such as login credentials and financial information.
Frameworks that govern man-in-the-middle attack
What the standards actually require on man-in-the-middle attack
Requirements naming man-in-the-middle attack across 6 standards, quoted from the control text.
Communication over the public channel needs authentication against man-in-the-middle attacks; information-theoretic authentication with universal-2 hashing needs a shared secret for the first round and can then use keys from earlier rounds, with the combined e...
etsi-industry-specification-group-isg-on-quantum-key-distribution-qkd::005.4.7.6 · 005.4.7.6 Authentication of the public channel and common protocol mistakes →Customer authentication for high-risk transactions includes methods that defeat malware and man-in-the-middle attacks, for example visual transaction signing.
ffiec-cybersecurity-assessment-tool-cat::D3.PC.Am.A.2 · D3.PC.Am.A.2 Access and Data Management (Advanced 2) →The system detects rootkits, remote desktop tools, virtualisation and other programs able to circumvent location detection, following best practice to detect and block location data fraud (for example virtual machines, remote desktop sessions and apps that fak...
gli-33-gaming-laboratories-international-event-wagering-systems::2.7.2 · 2.7.2 Location Fraud Prevention →Advanced control principles for access control (required, with baseline and intermediate, of an AI whose inherent risk is high). On a risk basis, access controls protect collaborative computing devices and applications (networked whiteboards, cameras, micropho...
hkma-cyber-resilience-assessment-framework-c-raf::3.1.A · 3.1 Access control: advanced level →Control: provide adequate controls for users to identify and authenticate the telecommunications organization. Purpose: to ensure users connect to the correct provider and to prevent unauthorised access to services.
iso-iec-27011-2024::8.35 · TEL: Telecommunications carrier identification and authentication by users →Mutual authentication shall be used against phishing and man-in-the-middle attacks (printed as #9 in the held text, a misnumbering).
iso-iec-29115-2013-entity-authentication-assurance-framework::10.3.C10 · Authentication control #10: MutualAuthentication →Questions people ask about man-in-the-middle attack
What is Man-in-the-Middle Attack?
Why is Man-in-the-Middle Attack important for compliance?
Which compliance frameworks address Man-in-the-Middle Attack?
Where can I learn more about Man-in-the-Middle Attack?
See how Man-in-the-Middle Attack applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.