MITM
Technology & Computing abbreviation · Cybersecurity
| Stands for | Man-in-the-middle |
|---|---|
| Categories | Technology & Computing |
MITM stands for Man-in-the-middle, a cybersecurity abbreviation.
An attack in which someone secretly intercepts, and possibly alters, communication between two parties who believe they are talking directly. Rogue Wi-Fi hotspots, ARP spoofing and forged certificates are common methods.
Example: The fake airport hotspot let attackers run a MITM against anyone who ignored the certificate warning.
Usage notes
Properly validated TLS, HSTS and certificate pinning make interception of HTTPS very difficult, so attackers target users who click through warnings or apps that skip validation. Neutral alternatives include "adversary-in-the-middle" (AitM) and "on-path attack", now preferred by some standards bodies. Corporate TLS inspection proxies perform a sanctioned form of interception.
Related abbreviations
More cybersecurity abbreviations
- KMS – Key Management Service
- MAC – Mandatory access control
- MD5 – Message-Digest Algorithm 5
- MDM – Mobile device management
- MDR – Managed detection and response
- MFA – Multi-factor authentication
- MSSP – Managed security service provider
- mTLS – Mutual TLS
- NAC – Network access control
- NDR – Network detection and response
- NGFW – Next-generation firewall
- NTLM – NT LAN Manager