What is the Three-way handshake? How can it be used to create a DOS attack?
Answer / chaitanya
The three-way handshake is a cornerstone of the TCP suite: SYN, SYN/ACK, ACK. SYN is the outgoing connection request from client to server. ACK is the acknowledgement of the server back to the client, saying that yes I hear you, let’s open a connection. SYN/ACK is the final connection, and allows the two to speak. The problem is that this can be used as a very basic type of Denial of Service Attack. The client opens up the SYN connection, the server responds with the SYN/ACK, but then the client sends another SYN. The server treats this as a new connection request and keeps the previous connection open. As this is repeated over and over many times very quickly, the server quickly becomes saturated with a huge number of connection requests, eventually overloading its ability to connect to legitimate users.
| Is This Answer Correct ? | 3 Yes | 1 No |
A phonetic password generator picks two segments randomly for each six-letter password. The form of each segment is CVC (consonant, vowel, consonant), where V= < a, e, i, o, u > and C = (V.) ̅ What is the total password population? What is the probability of an adversary guessing a password correctly?
You see a user logging in as root to perform basic functions. Is this a problem?
How many security protocols available?
What are accessories in computer?
Why would you want to use SSH from a Windows pc?
What is the Three-way handshake? How can it be used to create a DOS attack?
What is data protection in transit vs data protection at rest?
What’s the difference between Symmetric and Asymmetric encryption?
Why would you bring in an outside contractor to perform a penetration test?
What is residual risk?
What’s better, a red team or a blue team?
How would you lock down a mobile device?