Man-in-the-Browser
Have anyone find the way to mitigate the "Man-in-the-Browser" thread? I am wondering if we can write irules to mitigate this?
Please see detail of thread in http://www.trusteer.com/Solutions/m...owser-mitb
Forum Discussion
2 Replies
- Addtional clarification to my post.
Folks, has anyone come across security requirement to checksum HTML page to make sure what the server sends out is the same as what is finally loaded in the browser, to ensure there is no hacked java script injection in an infected browser? Hacked java script usually is used to send user id and password to hacker's machine.
Pavel_Jurik_707Nimbostratus
Hi Suwatchai, have you found some solution? thanks pavel
