52
Smurf
Attack
works
differently. It
effectively takes
advantage
of
poorly
configured network
devices
so
that
it
allows
ICMP
echo
request
packet
delivery
to
all
computers using broadcast address.
The
network becomes amplifier
to
heavily reply
the
packet with
large
numbers of
packets
to
forged source address,
which
is
assigned to
the
victim. The same technique, but using UDP instead, is called Fraggle Attack.
There
are
many
more.
Another
famous
attack
is
known
as
Teardrop
Attack.
It
sends
fragmented TCP
packets
with
overlapping value of
its
offset
field, thus
can
cause
the system to crash while reassembling. A Land Attack causes system to crash
itself as it
is confused that it receives request
from
itself. The source address of the TCP packet has
been
forged
to
have
same destination address.
Attacker can also
use
application such
as
IRC to cause IRC Flood. And
later, attackers
have
found a
way
to
launch DDoS attack
using
peer-to-peer connection.
This
is
interesting,
where
the
attacker
acts
as
master
in
peer-to-peer network and instructs connected hosts to commence DDoS.
 |