Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

System Security In this question, you will help Mallory develop new ways to conduct denial-of-service (DoS) attacks. (1) CHARGEN and ECHO are services provided by

System Security

In this question, you will help Mallory develop new ways to conduct denial-of-service (DoS) attacks.

(1) CHARGEN and ECHO are services provided by some UNIX servers. For every UDP packet arriving at port 19, CHARGEN sends back a packet with 0 to 512 random characters. For every UDP packet arriving at port 7, ECHO sends back a packet with the same content.

Mallory wants to perform a DoS attack on two servers. One with IP address M supports CHARGEN, and another with IP address N supports ECHO. Mallory can spoof IP addresses.

  1. Is it possible to create a single UDP packet with no content which will cause both servers to consume a large amount of bandwidth? If yes, describe the header (i.e., source IP, destination IP, source port, and destination port) of your UDP package; otherwise, explain why?
  2. Assume now that CHARGEN and ECHO are now modified to only respond to TCP packets (post-handshake) and not UDP. Is it possible to create a single TCP SYN packet with no content which will cause both servers to consume a large amount of bandwidth? If yes, describe the header (i.e., source IP, destination IP, source port, and destination port) of your UDP package; otherwise, explain why?

(2) A typical web server maintains a connection after receiving each TCP connection request. Write down the name of the transport layer attack that can cause denial-of-service on the web server which works by consuming a large amount of server memory.

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Recommended Textbook for

Transactions On Large Scale Data And Knowledge Centered Systems Xxxviii Special Issue On Database And Expert Systems Applications Lncs 11250

Authors: Abdelkader Hameurlain ,Roland Wagner ,Sven Hartmann ,Hui Ma

1st Edition

3662583836, 978-3662583838

More Books

Students also viewed these Databases questions

Question

Do other psychological syndromes have any place in the courtroom?

Answered: 1 week ago