PrepAway - Latest Free Exam Questions & Answers

What do the signature of attack for SYN Flood contains?

SYN Flood is a DOS attack in which an attacker deliberately violates the three-way handshake and opens a large number of half-open TCP connections. The signature of attack for SYN Flood contains:

A.
The source and destination port numbers having the same value

B.
A large number of SYN packets appearing on a network with the corresponding reply packets

C.
A large number of SYN packets appearing on a network without the corresponding reply packets

D.
The source and destination address having the same value

Explanation:
A SYN attack occurs when an attacker exploits the use of the buffer space during a Transmission Control Protocol (TCP) session initialization handshake. The attacker floods the target system’s small "in-process" queue with connection requests, but it does not respond when a target system replies to those requests. This causes the target system to time out while waiting for the proper response, which makes the system crash or become unusable.

One Comment on “What do the signature of attack for SYN Flood contains?


Leave a Reply