Understanding Man-In-The-Middle Attacks

• Part 1 - ARP Cache Poisoning
• Part 2 - DNS Spoofing
• Part 3 - Session Hijacking
• Part 4 - SSL Hijacking

Other links:

• Does HTTPS prevent man in the middle (MiTM) attacks?
• Securing the SSL/TLS channel againstman-in-the-middle attacks (PDF)
• Introducing Strict SSL: Protecting Against a Man-in-the-Middle Attack on Origin Traffic
• SSL and the future of authenticity: Perspectives and convergence model

Q&A:

• How secure is HTTPS today? How often is it attacked?

• Does HTTPS prevent man in the middle attacks by proxy server?
• How to prevent man-in-the-middle attacks beside of SSL?
• SSL and man-in-the-middle misunderstanding
• Is it possible to prevent man-in-the-middle attack when using self-signed certificates?