Changes between Version 1 and Version 2 of MitmExample

Timestamp:

Nov 4, 2010 5:29:20 PM (14 years ago)

Author:

sunshine

Comment:

MitmExample

@@ -6 +6 @@
 == Example 3: ARP poisoning with MITM attack ==
 
-This example used two metadescriptions. The first was ARP poisoning which is a flavor of cache poisoning, and the other is MITM attack.
+This example used two metadescriptions. The first was ARP poisoning which is a flavor of cache poisoning, and the other is MITM attack. This example is written in [CurrentlyProposedLanguage].
 
 
 === ARP poisoning metadescription ===
 
-  This is a special case of cache poisoning where the target is ARP cache. I've highlighted customizations from the general cache poisoning metadescriptions to arrive at this one.
+  This is a special case of cache poisoning where the target is ARP cache.
 
-Dimensions:
  * '''Logical topology:''' 
-   [[Image(arpcpobj.jpg)]]
 
-   (in English: There is one attacker node. There is a fakeIP of type IPaddress. A cache is simply a collection of ARPRecord items, one or more. These are  subtypes of Info and in the domain knowledge DB there's syntax defined for an ARPRecord. Cache does not reside at the attacker.)
+    '''Objects:'''
+
+      Attacker extends Node
+  
+      IP extends IPAddress
+
+      fakePA extends MACAddress
+
+      Cache extends Object
+
+      Cache := {ARPRecord[] records}
+
+    '''Cardinality:'''
+
+      |Attacker|,,1,,
+
+      |IP|,,1,,
+
+      |fakePA|,,1,,
+
+      |Cache|,,1,,
+
+    '''Relationships:'''
+      
+      not collocated(Cache, Attacker)
 
 
  * '''Timeline of events: '''
 
-  [[Image(arpwf.jpg, 50%)]]
+  '''Definitions:'''
 
-   (in English: Attacker sends the ARP reply with mapping of an ARP address to somebody's IP. This really could be anybody's ARP address but in most cases it is the attacker's.)
+    Attacker a, IP ip, fakePA fpa, Cache c
+
+      e1 := {type = ARPREPLY, origin = a, destination = c, content = (ip = fpa)}
+
+      s1 := {c.records += (ip = fpa)}
+
+  '''Timeline:'''
+
+      e1 -> s1
+ 
+
 
  * '''Invariants:'''