Cyber Security final

RIP

Early versions trust route announcements from peers. For routers.

IP Spoofing: a forged source

Stateless and connectionless - IP keeps no record of who sent what, so nothing at this layer checks the source field.

Any host can write any address - A forged source can slip past address-based access controls or hide where traffic really originates.

The basis for many attacks - Reflection, amplification, and many DDoS techniques depend on it.

Reflection attack

1. Attacker sends request to multiple servers, spoofing(forging), the source IP to match the victim’s IP

2. The servers respond to what they believe is the requester (actually the victim)

3. The victim’s network is flooded and overwhelmed by the unexpected incoming traffic.

Goes to the command center

tor

the onion router

Memcached

a caching system meant for use inside a data center, not on the open internet. Servers accidentally exposed to the internet can have huge amplification.

SYN flood

Starts handshakes it never completes, filling the server's backlog of half-open connections

Session hijacking

Predicts or observes sequence numbers to insert forged segments into a live connection

RST injection

Uses a valid sequence number to forge a reset and force the connection closed

BGP hijacking

• A malicious or misconfigured autonomous system announces IP prefixes it does not own.

• Traffic for entire organizations or regions is diverted.

• used by router