TCP SYN Flooding and IP Spoofing Attacks - The Diigo Meta page

• 07 Aug 07
  

  allendug

  hack syn

• 25 Mar 07
  

  del__t

  imported furl

• 24 Mar 07
  

  test_dellll

  hack imported:delicious syn

• 

  del_ttt

  hack imported:delicious syn

• 20 Sep 06
  

  Joel Liu

  hack syn

  • Systems providing TCP-based services to the Internet community may
    be unable to provide those services while under attack and for some
    time after the attack ceases. The service itself is not harmed by the
    attack; usually only the ability to provide the service is impaired.
    In some cases, the system may exhaust memory, crash, or be rendered
    otherwise inoperative.
  • The location of the attacking system is obscured because the source
    addresses in the SYN packets are often implausible. When the packet
    arrives at the victim server system, there is no way to determine its
    true source. Since the network forwards packets based on destination
    address, the only way to validate the source of a packet is to use input
    source filtering (see Appendix A).

Would you like to comment?

Join Diigo for a free account, or sign in if you are already a member.