There are plenty of different techniques in data manipulation where MiTM, DoS and ARP poisoning are emerging and commonly exploited. MiTM or called with other name person-in-the-middle (PITM) is a cyber-attack technique. Basically, in this technique, the attacker positioning himself between two sides of communication for listening and resolving any information in communication [DMD1]. DoS (a Denial-of-Service) attack is a cyber-attack in which the perpetrator aims to make a machine or network resource unavailable to its intended users by temporarily or permanently disrupting services of a host connected to the Internet [DMD2, DMD3]. ARP is a communication protocol for link layer in ISO reference model at RFC 826 [DMD1]. ARP Poisoning is called with different names like, ARP spoofing, ARP cache poisoning, or ARP poison routing. It is a technique by which an attacker sends (spoofed) ARP messages onto a local area network. Generally, the aim is to associate the attacker's MAC address with the IP address of another host, such as the default gateway, causing any traffic meant for that IP address to be sent to the attacker instead [DMD1, DMD4]. Industrial systems can be tested to detect these issues.