以下是中间人攻击和DNS解析的原理图:
中间人攻击原理图:
+----------------+ +----------------+
| Victim | | Attacker |
+----------------+ +----------------+
| |
1. Requesting a webpage 2. Intercept the request
| |
V V
+----------------+ +----------------+
| Web server (A) | | Web server (B) |
+----------------+ +----------------+
| |
3. Respond with page A 4. Forward victim's request to server B
| |
V V
+----------------------------------------------------+
| Attacker intercepts |
| and reads/modifies the communication |
+----------------------------------------------------+
DNS解析原理图:
Root DNS Servers
|
Top-Level Domain (TLD) DNS Servers (.com, .org, etc.)
|
Authoritative DNS Servers (google.com)
|
Recursive DNS Servers (ISP, Google Public DNS, OpenDNS)
|
You!