When I read this document about Fake Session Attack:

Bearing in mind that today most networks have asymmetric traffic routing (in which incoming and outgoing packets are being sent via different routes), and modern network security tools are designed for the analysis of unidirectional traffic (and not for the analysis of return traffic), conditions for this type of attack are perfect.

Why do they say this?

They are not talking about the below architecture, right? enter image description here

  • The article is missing some context and is not clear. I'm not sure that I agree with what is written in the article at all. – schroeder Apr 5 at 8:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.