@inproceedings{bc7894b516f24d02af7253ff2f76f901,
title = "Detection of MITM attack in LAN environment using payload matching",
abstract = "Man-in-the-Middle (MITM) attack enables an attacker to monitor the communication exchange between two parties by directing the traffic between them to pass through the attacker's machine. Most existing schemes for discovering MITM attack focus on detecting the mechanism used to direct the traffic through the attacker machine. This paper presents a new detection scheme that is based on matching the payload of frames exchanged in the network. The proposed scheme is independent of the mechanism used to launch the MITM attack. Experimental result shows that the proposed scheme can achieve excellent detection performance with proper choice of the scheme's tuning parameters.",
keywords = "ARP poisoning, MITM, attack, detection, security, traffic analysis",
author = "{Al Abri}, Dawood",
note = "Publisher Copyright: {\textcopyright} 2015 IEEE.; 2015 IEEE International Conference on Industrial Technology, ICIT 2015 ; Conference date: 17-03-2015 Through 19-03-2015",
year = "2015",
month = jun,
day = "16",
doi = "10.1109/ICIT.2015.7125367",
language = "English",
series = "Proceedings of the IEEE International Conference on Industrial Technology",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
number = "June",
pages = "1857--1862",
booktitle = "2015 IEEE International Conference on Industrial Technology, ICIT 2015",
edition = "June",
}