Network Attacks

Question 1

SYN Flood

Answer 1

Type of DoS attack

Actor sends SYN packets but never completes the handshake.

Each SYN request uses resources on the network device as it waits to complete the handshake

Solutions:
1. Implement SYN Cookies
2. Limit amount of time the device waits to complete handshake

Question 2

SMURF Attack

Answer 2

DoS attack using ICMP echo broadcast packets where the source IP address is spoofed to be the target IP address. This results in the spoofed device receiving many broadcast responses back from the devices that were pinged.

Routers no longer respond to broadcast messages because of RFC 2644.

Question 3

Fraggle Attack

Answer 3

Similar to SMURF attack but uses UDP broadcast packets over ports 7 and 19.

Question 4

Ping Flood Attack

Answer 4

Overwhelms target system with Ping requests usually using a botnet. Type of DDoS attack.