11.3 - Denial of Service Attacks Flashcards

1
Q

What is Denial of Service?

A

Attempt to exhaust resources:

  • Network bandwidth
  • TCP connections
  • Server resources
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

3 different defenses against DoS

A
  1. Ingress filtering
    + fool proof
    + works at edges
    • doesn’t work in core
  2. uRPF checks
    + automatic
    • requires symmetric routing
  3. SynCookies (TCP)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Advantages of SYN cookies

A

Prevent server from exhausting state after TCP SYN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Backscatter

A

IP address spoofing -> “backscatter”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly