In the last lecture, we had an introduction to orders, denial of service attack.
So basically denial of service DOS is an attack on a computer network that reduces, restricts or prevents
accessibility of the same resources towards legitimate users.
So the first type of attack is UDP third attack and attacker since spoofed Urabe Packards at a very
high, Attrit, remote post on random parts of the target server using a large source IP range threatening
of UDP packets cause a server to repeatedly check for nonexistent applications at the ports.
Legitimate applications are inaccessible by the system and gives a reply with an ICMP destination unreachable
packet.
This attack consumes network resources and available bandwidth, exhausting the network and it goes
offline.
The next is ICMP third attack.
Network administrators use ICMP primarily for IP operations, troubleshooting and error messaging of
undeliverable packets.
ICMP attack is a type of attack in which the attackers in large volumes of ICMP because it was because
the victim system directly or through reflexion networks, these packets signal the victim's system
replay and the combination of traffic saturates the bandwidth of the victims network connection, thereby
causing it to be overwhelmed and subsequently stop responding to legitimate PXP requests to protect
against ICN before an attack set a limit.
Which one expert invokes the ICMP attack protection feature?
The next is being of the attack and the peak of the attack.
And attacker tries to crash, destabilize or freeze the targeting system or service by sending malformed
hot over suspects using a simple Pinkham on, for instance, the attacker sends a packet which is the
size of sixty five thousand five hundred bytes to the target.
The possible size of the packet exceeds the size limit prescribed by the autopsy 791 IP, which is sixty
five thousand 535 words.
And that's what the packet which is attacking sending is three words more.
The reassembly processed by the receiving system might cause a system to crash.
The next is Synthron attack.
The attacker sends a large number of requests to a target server that is the victim.
But the fixer's IP addresses the target machine sends back a cynic in response to the request and waits
for the ECJ to complete the station.
Set up the machine does not get the response because the source addresses fake sincerity, takes advantage
of a flaw in the way most hosts implement the DCB transship.
When the host receives the scene from another host, it must keep track of the partially open connection
in Alisson Queue for at least seventy five seconds.
A malicious host can explore the small size of the lesson queue by sending multiple requests to the
host, but never replace the Sinak request.
The victims listen queue is quickly filled up.
This ability of holding each incomplete connection for seventy five seconds can cumulatively used as
a dinner service.
There is simpler a type of denial of service category, and the last is fragmentation.
Attack these attacks destroy a victim's ability to reassemble the fragmented packets by flooding it
with DCB or Urabe fragments resulting in a reduced performance.
Attacker sends a large number of fragments.
It is fifteen hundred plus bite package to the target server, but relatively small packet rate.
Since the protocol allows the fragmentation, these packets usually pass through the network equipments,
recruiters, firewalls, ideas, IP, etc. which remain uninspected.
Reassembling and inspecting these large, fragmented packs consumes existing resources.
Moreover, the content in the packet fragments will be randomized by the attacker, which makes the
process to consume more resource and leading the system to crash.
In the next lecture, we will see what is a botnet and how botnet is used for those attacks.