Man in the Browser Attacks

T Dougan, K Curran

Research output: Contribution to journalArticlepeer-review

45 Citations (Scopus)


Man-in-the-Browser attacks are a sophisticated new hacking technique associated with Internet crime, especially that which targets customers of Internet banking. The security community has been aware of them as such for time but they have grown in ability and success during that time. These attacks are a specialised version of Man-in-the-Middle attack, and operate by stealing authentication data and altering legitimate user transactions to benefit the attackers. This paper examines what Man-in-the-Browser attacks are capable of and how specific versions of the attack are executed, with reference to their control structure, data interaction techniques, and methods for circumventing security. Finally the authors discuss the effectiveness of counter-Man-in-the-Middle strategies, and speculate upon what these attacks tell us about the Internet environment.
Original languageEnglish
Pages (from-to)29-39
Journalnternational Journal of Ambient Computing and Intelligence
Issue number1
Publication statusPublished (in print/issue) - 2 Jan 2012


Dive into the research topics of 'Man in the Browser Attacks'. Together they form a unique fingerprint.

Cite this