ITPEC FE Morning April 2020 Question 39

MITM Attack — IP usage by the attacker — identify which IP the attacker uses in each direction.

In a Man-in-the-Middle attack, the attacker sits between victim and server:

• •To the server: attacker uses the victim's IP (impersonates the client)
• •To the victim: attacker uses the server IP (impersonates the server)

The attacker mirrors each side's expected IP address to remain invisible.

Why not others:
- (a) "only server IP" — server would reject requests not from a recognized client
- (b) "only victim's IP" — victim would see responses from an unknown IP
- (d) directions are swapped — using victim's IP toward the victim makes no sense

Key rule: In MITM, the attacker always impersonates the other party to each side of the communication.

AI-generated — may contain errors