Can I read What You See Is Not What You Get: a Man-in-the-middle Attack Applied to Video Channels on EtoBox?

What You See Is Not What You Get: a Man-in-the-middle Attack Applied to Video Channels by Mauro Conti; Eleonora Losiouk; Alessandro Visintin is a scholarly article available to read on EtoBox.

What is What You See Is Not What You Get: a Man-in-the-middle Attack Applied to Video Channels about?

People usually think that digital screens are reliable devices. Unfortunately, attackers can exploit this blind trust to persuade a user to perform unintended actions. In this paper, we present a novel type of Man-in-the-Middle attack named Man-in-the-Video. Man-in-the-Video intercepts the video stream flowing between a computer and its screen and modifies it on-the-fly. The objective of such attack is to distort the perception of reality and to induce improper user behaviour. We implemented HackDMI, a Man-in-the-Video attack performed over an HDMI cable. We applied this attack to a realistic threat scenario (i.e., phishing) and we evaluated it with quantitative measures. HackDMI is able to deceptively modify a 720p video stream, while maintaining a frame-rate of 14FPS. We also recorded three demo videos for qualitative evaluation.

Author

Mauro Conti; Eleonora Losiouk; Alessandro Visintin

Publisher

ACM

Published

2022

Language

EN