3 ms·
synflooding is not mitigated by syncookies. the attacker can encode information inside the packets in exactly the same way as the server, meaning they don't hav
by blibble 12y ago
synflooding is not mitigated by syncookies.
the attacker can encode information inside the packets in exactly the same way as the server, meaning they don't have to maintain any state, see:
http://insecure.org/stf/tcpdos/outpost24-sect-sockstress.ppt http://insecure.org/stf/tcpdos/outpost24-sect-sockstress.ppt (slide 18 onwards)
- Buge 12y agoThat's not a syn flood though. A syn flood is purely syns. So there is no need for the attacker to encode information if they are just doing a syn flood.