Types of Cyber Attacks: DoS, Spoofing, Social Engineering, and Encrypted Data, Slides of Cryptography and System Security

Download Types of Cyber Attacks: DoS, Spoofing, Social Engineering, and Encrypted Data and more Slides Cryptography and System Security in PDF only on Docsity!

Attacks and Malicious Code

Chapter 3

Learning Objectives

 Explain denial-of-service (DoS) attacks  Explain and discuss ping-of-death attacks  Identify major components used in a DDoSattack and how they are installed  Understand major types of spoofing attacks  Discuss man-in-the-middle attacks, replayattacks, and TCP session hijacking continued…

Denial-of-Service Attacks

 Any malicious act that causes a system tobe unusable by its real user(s)  Take numerous forms  Are very common  Can be very costly  Major types  SYN flood  Smurf attack

SYN Flood

 Exploits the TCP three-way handshake  Inhibits server’s ability to accept new TCPconnections

IP Fragmentation Attacks:

Ping of Death

 Uses IP packet fragmentation techniques tocrash remote systems

Distributed Denial-of-Service Attacks

 Use hundreds of hosts on the Internet to attackthe victim by flooding its link to the Internet ordepriving it of resources  Used by hackers to target government andbusiness Internet sites  Automated tools; can be executed by scriptkiddies  Result in temporary loss of access to a given siteand associated loss in revenue and prestige

DDoS Countermeasures

 Security patches from software vendors  Antivirus software  Firewalls  Ingress (inbound) and egress (outbound)filtering

Ingress and Egress Filtering

Preventing the Network from

Inadvertently Attacking Others

 Block at the firewall any packet that uses aprotocol or port that is not used for Internetcommunications on the network  Block packets with a source addressoriginating inside your network fromentering your network

Ingress Filtering of Packets

with RFC 1918 Addresses