Common Network Attacks

• SYN flooding:

1 Z(x) ---SYN---> A ...

2 X<---SYN/ACK--- A …

3 X <---RST--- A

• 1) Attacking host sends a multitude of SYN requests to fill it's backlog queue with pending connections.

• 2) The target responds with SYN/ACKs to what it believes is the source of the incoming SYNs. All further requests to this TCP port will be ignored. The target port is flooded.

Previous slide

Next slide

Back to first slide

View graphic version