Distributed Denial of Service (DDoS) attacks are one of the major threats in IT Systems today. DDoS attacks come in many forms and UDP flood and TCP SYN attacks depicted in Figure 1, are some of the most common DDoS attacks in computer networks/systems. Although both attacks can have severe effects on a target system, UDP flood attacks are considered more sophisticated and can be hard to detect compared to TCP SYN attacks: 

a) In detail, explain why it is difficult to handle and detect UDP flood attacks.

b) In what way do TCP SYN attacks exhaust the target system's resources? You may use the figure below (System B) to explain your answer.

c) Explain why it is challenging to mitigate DDoS attacks in general.

Transcribed Image Text:

LOP SACK NACK SINAC SACK System A: DDOS UDP Flooding Attack System B: DDOS TCP SYN Flooding Attack ex LOP SACK NACK SINAC SACK System A: DDOS UDP Flooding Attack System B: DDOS TCP SYN Flooding Attack ex