Lukas' Notes

web security

Definition

Network Attacker Model

In the network attacker model the attacker can read and modify unencrypted traffic between the victim and bank.com, typically by luring the victim onto a network the attacker controls. They can also connect to the server directly.

Network attackers are usually the most powerful of the three web threat models, but a same-site attacker with a valid TLS certificate can sometimes exceed that power. The standard defence against a network attacker is HTTPS, which hides the content and detects modification.