CAPEC™ 94: Adversary in the Middle (AiTM)
Description
An adversary targets the communication between two components (typically client and server), in order to alter or obtain data from transactions. A general approach entails the adversary placing themself within the communication channel between the two components.
Source: CAPEC™ 94
Related ASVS Requirements
ASVS (5.0): 11.2.1, 11.2.3, 11.2.4, 11.2.5, 11.3.1, 11.3.2, 11.3.3, 11.3.4, 11.3.5, 11.4.1, 11.4.3, 11.5.1, 11.5.2, 11.6.1, 11.6.2, 12.1.1, 12.1.2, 12.1.3, 12.1.4, 12.1.5, 12.2.1, 12.2.2, 12.3.1, 12.3.2, 12.3.3, 12.3.4, 12.3.5, 14.1.1, 14.1.2, 14.2.1, 14.2.3, 14.2.4, 14.2.6, 14.2.7, 16.3.3, 16.3.4, 3.4.1, 3.7.4, 4.1.2, 4.1.5, 4.4.1, 6.7.1, 9.1.1, 9.1.2, 9.1.3
