ABSTRACT ARENA
Study on Denial of Service attacks
THE INTERNET can be viewed in so many different ways. Here this paper is intended on study and prevention of Denial of Service (DoS) attacks. A attack is an attack which attempts to prevent the victim from being able to use all or part of their network connection. DoS attacks have been around for many years and they are becoming increasingly menacing.
Types of DoS attacks: These are a few of the classic denial of service attacks. Most of these rely upon weaknesses in the TCP/IP protocol. Vendor patches and proper network configuration have made most of these denial of service attacks difficult or impossible to accomplish.
Flood Attack: The earliest form of denial of service attack was the flood attack. The attacker simply sends more traffic than the victim could handle. This is the most difficult to completely prevent.
Ping of Death Attack: The Ping of Death attack relied on a bug in the Berkeley TCP/IP stack which also existed on most systems which copied the Berkeley network code. The ping of death was simply sending ping packets larger than 65,535 bytes to the victim.
SYN Attack: In the TCP protocol handshaking of network connections is done with SYN and ACK messages. The system that wishes to communicate sends a SYN message to the target system. The target system then responds with an ACK message. In a SYN attack the attacker floods the target with SYN messages spoofed to appear to be from unreachable Internet addresses.
Teardrop Attack: The Teardrop Attack uses IP's packet fragmentation algorithm to send corrupted packets to the victim machine. This confuses the victim machine and may hang it.
Smurf Attack: The attacker sends a ping request to a broadcast address at a third-party on the network. This ping request is spoofed to appear to come from the victims network address. Every system within the broadcast domain of the third-party will then send ping responses to the victim.
Distributed Denial of Service (DDoS) Attack: This is a denial of service attack which is mounted from a large number of locations across the network. DDoS attacks are usually mounted from a large number of compromised systems. DDoS attacks can be very difficult to defend against.
Students are welcome to send abstracts of their research papers, study papers or technical papers in all subjects to this column. The abstracts around 200 words and containing the complete address of the college can be emailed to collegian-@thehindu.co.in or to The City Editor, The Hindu, Begumpet, Hyderabad-16.
Bharath Kumar. Y,
GITAM, Hyderabad
Printer friendly
page
Send this article to Friends by
E-Mail
Education Plus
Karnataka
Chennai
Coimbatore
Hyderabad
Madurai
Tiruchirapalli
Vijayawada
Visakhapatnam