Man-in-the-Middle Attack

A man-in-the-middle attack intercepts communications between two parties without their knowledge, allowing the attacker to eavesdrop, modify, or inject data. HTTPS with proper certificate validation, HSTS, and certificate pinning are primary defenses against network-level MitM attacks.

MitM attacks at the application layer (e.g., through malicious proxies or BGP hijacking) require additional controls like mutual TLS and certificate transparency monitoring.