Developing an Attack Model for compromising Privacy over Secure Connection Protocols

Nowadays with the advancement in the IoT, Man-In-The-Middle (MITM) attack is classified as one of the major concerns for network security experts since it is very hard to detect. It directly affects the data being transmitted - through the network- between the endpoints, its secrecy, and reliability. Besides, the adversary can reveal much sensitive information, such as Social Network credentials, websites, and images being browsed by the victim who may not be able to notice that he/she is under attack. MITM can run over secure connections ( using secure protocols like HTTPS) which make it classified as one of the most dangerous and challenging attacks. In the literature, many researchers have proved that MITM attack invoke the integrity of data if HTTP protocol was used, and users' privacy can be revealed. In this research, we prove that users' privacy can be revealed even though a secure connection protocol (HTTPS was used). Firstly, we survey MITM attack, ARPs Spoofing, and prevention mechanisms. Then, we explain how to perform MITM attack, and gather transmitted data from the user. Finally, we analyze the collected data and show how the adversary can obtain victim's private information from the analyzed data.