Browser-in-the-Middle (BitM) attack

Abstract Man-in-the-Middle (MitM), one of the best known attacks in world computer security, is among greatest concerns for professionals field. Main goal MitM to compromise confidentiality, integrity and availability data flowing between source destination. However, most its many variants involve difficulties that make it not always possible. The present paper aims at modelling describing a new method attack, named Browser-in-the-Middle (BitM) which, despite similarities with way controls flow client service accesses, bypasses some MitM’s typical shortcomings. It could be started by phishing techniques cases coupled well-known Man-in-the-Browser (MitB) attack. will seen how BitM expands range possible attacker’s actions, same time making them easier implement. Among features, absence need install malware any kind on victim’s machine total control allows attacker are emphasized.