In this question, you will help Mallory develop new ways to conduct denial-of-service (DoS) attacks. (1) CHARGEN and ECHO are services provided by some UNIX servers. For every UDP packet arriving at port 19, CHARGEN sends back a packet with 0 to 512 random characters. For every UDP packet arriving at port 7, ECHO sends back a packet with the same content. Mallory wants to perform a DoS attack on two servers. One with IP address M supports CHARGEN, and another with IP address N supports ECHO. Mallory can spoof IP addresses. Is it possible to create a single UDP packet with no content which will cause both servers to consume a large amount of bandwidth? If yes, describe the header (i.e., source IP, destination IP, source port, and destination port) of your UDP package; otherwise, explain why? Assume now that CHARGEN and ECHO are now modified to only respond to TCP packets (post-handshake) and not UDP. Is it possible to create a single TCP SYN packet with no content which will cause both servers to consume a large amount of bandwidth? If yes, describe the header (i.e., source IP, destination IP, source port, and destination port) of your UDP package; otherwise, explain why?
In this question, you will help Mallory develop new ways to conduct denial-of-service (DoS) attacks.
(1) CHARGEN and ECHO are services provided by some UNIX servers. For every UDP packet arriving at port 19, CHARGEN sends back a packet with 0 to 512 random characters. For every UDP packet arriving at port 7, ECHO sends back a packet with the same content.
Mallory wants to perform a DoS attack on two servers. One with IP address M supports CHARGEN, and another with IP address N supports ECHO. Mallory can spoof IP addresses.
- Is it possible to create a single UDP packet with no content which will cause both servers to consume a large amount of bandwidth? If yes, describe the header (i.e., source IP, destination IP, source port, and destination port) of your UDP package; otherwise, explain why?
- Assume now that CHARGEN and ECHO are now modified to only respond to TCP packets (post-handshake) and not UDP. Is it possible to create a single TCP SYN packet with no content which will cause both servers to consume a large amount of bandwidth? If yes, describe the header (i.e., source IP, destination IP, source port, and destination port) of your UDP package; otherwise, explain why?
(2) A typical web server maintains a connection after receiving each TCP connection request. Write down the name of the transport layer attack that can cause denial-of-service on the web server which works by consuming a large amount of server memory.
Step by step
Solved in 2 steps