Changes between Version 2 and Version 3 of MitmExample
- Timestamp:
- Nov 4, 2010 5:32:49 PM (14 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
MitmExample
v2 v3 58 58 59 59 60 * '''Invariants:''' 61 62 Nothing in addition to the topology and timeline above. 60 * '''Invariants:''' Nothing in addition to the topology and timeline above. 63 61 64 62 === MITM attack metadescription === 65 63 66 Dimensions:67 64 * '''Logical topology:''' 68 [[Image(mitmobj.jpg)]]69 65 70 (in English: There is one attacker node, and two regular nodes who want to communicate. These are all different nodes.) 66 '''Objects:''' 67 68 Attacker, Node1, Node2 extends Node 69 70 '''Cardinality:''' 71 72 |Attacker|,,1,, 73 74 |Node1|,,1,, 75 76 |Node2|,,1,, 77 78 '''Relationships:''' 71 79 72 80 73 81 * '''Timeline of events: ''' 74 82 75 [[Image(mitmwf.jpg, 70%)]]83 '''Definitions:'' 76 84 77 (in English: Attacker replaces each msg between nodes with some modification.)85 Attacker a, Node1 n1, Node2 n2 78 86 79 * '''Invariants:'''87 e1 := {type = MSG, origin = n1, destination = a, content = x} 80 88 81 Nothing in addition to the topology and timeline above. 89 e2 := {type = MSG, origin = a, destination = n2, content = modify(x)} 90 91 e3 := {type = MSG, origin = n2, destination = a, content = y} 92 93 e4 := {type = MSG, origin = a, destination = n1, content = modify(y)} 94 95 '''Timeline:''' 96 97 e1 -> e2 and e3 -> e4 98 99 * '''Invariants:''' Nothing in addition to the topology and timeline above. 82 100 83 101 === Experiment design === … … 85 103 Now I'm a user who wants to design an experiment. I need to combine two metadescriptions (ARP poisoning and MITM attack) and somehow tie them down to generator choices. To combine I'll do something like this: 86 104 87 [[Image(arpmitmcomb.jpg)]]105 ARPPoisoning arp1, ARPPoisoning arp2, MITMAttack mitm 88 106 89 i.e. the ARP experiment needs to be run twice to generate the mappings at node1 and node2 necessary for the attacker to appear on the path from node1 to node2. The cache we're poisoning is at node1 and node2. Poison links the IP address of node2 and node1 respectively with the attacker's ARP address. 107 arp1.FakePA = mac(mitm.Attacker) 90 108 91 The system now needs to offer me several generators: 109 arp1.IP = ip(mitm.Node2) 92 110 93 * It should offer a topology generator and map the nodes (Node1, Node2, Attacker) to the topology that gets generated. Caches have to reside at Node1 and Node2. 94 * It should offer event generator for each of the events: reply (for ARP), and mod(for message). 111 collocated(arp1.Cache, mitm.Node1) 112 113 arp2.fakePA = mac(mitm.Attacker) 114 115 arp2.IP = ip(mitm.Node1) 116 117 collocated(arp2.Cache, mitm.Node2) 118 119 (arp1 and arp2) -> mitm 120