Lab 4: Network Vulnerabilities Part 2

Explain in your own words the DOS attack scenario.

Dos is a denial of service. Its purpose is to make the normal service not available to the computer or network.

First, when establishing a connection, the client sends a SYN packet ((SYN=i) to the server and enters the SYN SEND state, waiting for the server to confirm;

Second, the server receives the SYN packet, must confirm the customer’s SYN (ACK=i+1), and also sends a SYN packet ((SYN=j)}, that is, the SYN+ACK packet, and the server enters the SYN_RECV state;

Third, the client receives the SYN+ACK packet of the server and sends an acknowledgement packet ACK (ACK=j+1) to the server. After the packet is sent, the client and the server enter the ESTABLISHED state, completing the three-way handshake, and the client and the server start. Transfer data.

Explain in your own words how the Hping3 attack causes the denial of service.

Hping3 supports file transfer via TCP/UDP/ICMP and other packages. Equivalent to establishing secret tunnel communication with TCP/UDP/ICMP packets. Using Hping3 makes it easy to build denial of service attacks. For example, a large number of SYN connections are initiated to the target device, the forged source address is 192.168.10.99, and each SYN packet is sent at intervals of 1000 microseconds.

Discuss the benefits of using anti-phishing functionality.

Phishing attacks use fraudulent emails and fake Web sites to conduct fraudulent activities. The fraudsters often disclose their financial data, such as credit card numbers, account numbers and passwords, and social security numbers.

Anti-phishing means that regardless of the user’s access to any website, the software will promptly alert the user through the lower right corner of the IE window. The security alert is a three different color cue light, and the user can check the security of the website according to the cue light. So using anti-phishing can effectively protect your finances and be safe to go online.

Critical Thinking Analysis

Denial of service is usually a means of cyber attack used to make sub-weapons or networks paralyzed. And the denial of service can be generated under the attack of Hping3. In addition, phishing is by sending a large amount of fraudulent spam claims to come from banks and other well-known institutions, by enticing the recipient to give sensitive information.

Consequently, understanding the functions of denial of service and anti-phishing can effectively make people have a sense of self-protection. Thereby reducing the risk of personal information disclosure

留下评论

通过 WordPress.com 设计一个这样的站点
从这里开始