Question: SYN cookies were discussed in Section 3.5.6. a. Why is it necessary for the server to use a special initial sequence number in the SYNACK?
a. Why is it necessary for the server to use a special initial sequence number in the SYNACK?
b. Suppose an attacker knows that a target host uses SYN cookies. Can the attacker create half-open or fully open connections by simply sending an ACK packet to the target? Why or why not?
c. Suppose an attacker collects a large amount of initial sequence numbers sent by the server. Can the attacker cause the server to create many fully open connections by sending ACKs with those initial sequence numbers? Why?
Step by Step Solution
3.42 Rating (152 Votes )
There are 3 Steps involved in it
a The server uses special initial sequence number that is obtained from the hash of source and desti... View full answer
Get step-by-step solutions from verified subject matter experts
Document Format (1 attachment)
899-CS-CN (499).docx
120 KBs Word File
