man in the browser

Many experienced Web users are aware of phishing scams, in which an unsuspecting user is directed to a fake Web site through a link in an e-mail or some other notification. A man in the browser attack, however, unlike phishing, occurs when the victim has entered the URL into the browser independently, without an external prompt. On the surface, transactions are taking place normally with expected prompts and password requirements.

A man in the browser attack is similar to the man in the middle tactic, in which an attacker intercepts messages in a public key exchange. The attacker then retransmits them, substituting bogus public keys for the requested ones. A man in the browser attack is more difficult to prevent and disinfect, however, because instead of occurring in a public exchange, the activity takes place between the user and the security mechanisms within that user's browser.

Read more about man in the browser: - In this paper, Philipp Guhring explains man in the browser and suggests countermeasures. - Covelight Systems offers a solution that can protect computers against emerging attack forms.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Microsoft Word zero-day being actively exploited Attackers are actively targeting a flaw in Microsoft Word, according to Symantec. New defenses for automated SQL injection attacks By automating SQL injection attacks, hackers have found a way to expedite the process of finding and exploiting vulnerable websites. The old defenses... Are there antivirus suites that pick up more than just run-of-the-mill viruses? There are some rare forms of malware that antivirus software doesn't pick up on, but there are some good tools to remove all sorts of malware.

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary bot worm  (SearchSecurity.com) A bot worm is a self-replicating malware program that resides in current memory, turns infected computers into zombies (or bots) and transmits itself... cache poisoning  (SearchSecurity.com)