Eliminating middlemen from security protocols helps less than one would think. EMV electronic payments, for example, can be made fairer by adding an electronic attorney – a middleman which mediates access to a customer’s card. We compare middlemen in crypto protocols and APIs with those in the real world, and show that a manin-the-middle defence is helpful in many circumstances. We suggest that...

Man-in-the-middle attack is used wildly as a method of attacking the network. To discover how this type of attack works, this paper describes a method of man-in-the-middle attack based on ARP spoofing, and proposes a method of preventing such attacks.

Let π = π1π2 · · · πn be any permutation of length n, we say a descent πiπi+1 is a lower, middle, upper if there exists j > i + 1 such that πj < πi+1, πi+1 < πj < πi, πi < πj, respectively. Similarly, we say a rise πiπi+1 is a lower, middle, upper if there exists j > i + 1 such that πj < πi, πi < πj < πi+1, πi+1 < πj, respectively. In this paper we give an explicit formula for the generating fu...

Unconditionally secure authentication codes with arbitration (A 2-codes) protect against deceptions from the transmitter and the receiver as well as that from the opponent. In this paper, we present combinatorial lower bounds on the cheating probabilities and the sizes of keys of A 2-codes. Especially, our bounds for A 2-codes without secrecy are all tight for small size of source states.

This paper discusses a new protocol implementing authentication in a multi-located environment that avoids man-in-the-middle (MIM) attack, replay attack and provides privacy, integrity of a message for multi-located parties. The protocol uses the concept that each party is associated with a subsidiary agent.

There is mounting pressure on companies to detect fraud perpetrated by the new generation of cyber-fraudsters who are becoming adept at impersonating genuine customers – by being the Man-in-the-Middle or the Man-in-the-Browser. Ori Eisen, founder and Chief Innovation Officer of 41st Parameter, explains this new threat to data security and describes how DeviceInsight technology can help to detec...

Recent advances in hardware, software, computing, and communication technologies have enabled the design and deployment of a smarter, interactive, dynamic 21st century electrical grid, also known as the smart grid. The bi-directional flow of information between the customer premise and the utility provider opens up several privacy challenges that must be addressed. We describe possible man-in-t...