178. Distributed Denial of Service

DoS

Denial of Service

Denial of Service

Used to describe an attack that attempts to make a computer or server’s resources unavailable

Flood Attack

DoS which attempts to send more packets to a single server or host than it can handle

Ping Flood

Flood attack in which a server is sent with too many pings (ICMP echo)

SYN Flood

An attacker will initiate multiple TCP sessions but never complete the three-way handshake

Flood Attack Defenses

Flood Guards

Timeout

Intrusion Prevention

PDoS

Permanent Denial of Service

Permanent Denial of Service

Attack which exploits a security flaw by reflashing a firmware, permanently breaking network device until its firmware can be reloaded

Fork Bomb

Large number of processes is created to use up a computer’s available processing power

DDoS

Distributed Denial of Service

Distributed Denial of Service

More machines are used to launch an attack simultaneously against a single server to create a DoS condition

DNS Amplification Attack

DDoS that allows an attacker to initiate DNS requests from a spoof IP addres to flood a website