Layers Attacks
- 1. Layers Attack Prof. Neeraj Bhargava Kapil Chauhan Department of Computer Science School of Engineering & Systems Sciences MDS University, Ajmer
- 2. Security Attacks on Different Layers IP Attacks ICMP Attacks Routing Attacks TCP Attacks Application Layer Attacks
- 3. TCP/IP was designed for connectivity Assumed to have lots of trust Host implementation vulnerabilities Software “had/have/will have” bugs Some elements in the specification were left to the implementers
- 4. Security Flaws in IP IP fragmentation attack End hosts need to keep the fragments till all the fragments arrive Traffic amplification attack IP allows broadcast destination Problems?
- 5. ICMP Attacks No authentication ICMP redirect message Can cause the host to switch gateways Benefit of doing this? Man in the middle attack, sniffing ICMP destination unreachable Can cause the host to drop connection
- 6. Routing Attacks Distance Vector Routing Announce 0 distance to all other nodes Blackhole traffic Eavesdrop Link State Routing Can drop links randomly Can claim direct link to any other routers A bit harder to attack than DV BGP ASes can announce arbitrary prefix ASes can alter path
- 7. TCP Layer Attacks TCP Session Hijack When is a TCP packet valid? Address/Port/Sequence Number in window How to get sequence number? Sniff traffic Guess it Many earlier systems had predictable ISN Inject arbitrary data to the connection
- 8. Application Layer Attacks Applications don’t authenticate properly Authentication information in clear FTP, Telnet, POP DNS insecurity DNS poisoning DNS zone transfer
- 9. Intrusion Detection Systems Firewalls allow traffic only to legitimate hosts and services Traffic to the legitimate hosts/services can have attacks CodeReds on IIS Solution? Intrusion Detection Systems Monitor data and behavior Report when identify attacks
- 10. Intrusion Detection Systems Firewalls allow traffic only to legitimate hosts and services Traffic to the legitimate hosts/services can have attacks CodeReds on IIS Solution? Intrusion Detection Systems Monitor data and behavior Report when identify attacks