RFC4081 - Security Threats for Next Steps in Signaling (NSIS)

            Figure 3: MITM Attack during the Discovery Exchange

   This attack assumes that the adversary is able to eavesdrop on the
   initial discovery message sent by the sender of the discovery
   message.  Furthermore, we assume that the discovery reply message by
   the adversary returns to the discovery message initiator faster than
   the real response.  This represents some race condition
   characteristics if the next NSIS node is very close (in IP-hop terms)
   to the initiator.  Note that the problem is self-healing since the
   discovery process is periodically repeated.  If an adversary is
   unable to mount this attack with every discovery message, then the
   correct next NSIS node along the path will be discovered again.  A
   ping-pong behavior might be the consequence.

   As shown in message step (2) in Figure 3, the adversary returns a
   discovery reply message with its own IP address as the next NSIS-
   aware node along the path.  Without any additional information, the
   discovery message initiator has to trust this information.  Then a
   messaging association is established with an entity at a given IP

上一页 [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31] [32] [33] [34] [35] [36] [37] [38] 下一页

复制本页网址和标题，发送给你QQ/Msn的好友一起分享

上一篇:RFC4085 - Embedding Globally-Routable Internet Addresses Considered Harmful

下一篇:RFC4103 - RTP Payload for Text Conversation