0
$\begingroup$

i have read about SYN cookies and i understood that they help to avoid DOS .. BUt my prof wants an answer as how SYN cookies can be used to cause DOS and how can it be avoided ? any help woul dbe really appreciated.. thanks in advance

$\endgroup$

closed as off-topic by David Richerby, Evil, vonbrand, Discrete lizard, Yuval Filmus May 19 '18 at 11:05

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about computer science, within the scope defined in the help center." – David Richerby, Evil, vonbrand, Discrete lizard, Yuval Filmus
If this question can be reworded to fit the rules in the help center, please edit the question.

  • $\begingroup$ This looks like a question for Information Security, to me. $\endgroup$ – David Richerby May 17 '18 at 13:35
  • $\begingroup$ Or perhaps Unix&Linux $\endgroup$ – vonbrand May 17 '18 at 19:26
  • $\begingroup$ SYN cookies help avoiding DOS attacks. Sure, any mechanism can be overwhelmed, in this case sending enough traffic to make the CPU work overtime. But for that, you need enough of it to flood the network, and the whole point of SYN attack (cause a DOS with very modest network traffic) becomes moot. $\endgroup$ – vonbrand May 17 '18 at 19:31
0
$\begingroup$

Computing syncookies requires taking a hash of the server and client's IPs and ports... These hashes may not be inexpensive esp if they are to be cryptographically secure. One way to DOS the syncookie code is to make so many requests that the CPU of the server is exhausted. I believe that Linux uses a less expensive (and not cryptographically secure) hash function, so this is less of an issue.

You could probably also spoof sender IP and use syncookies to be sent to a victim. But that is not that useful/ interesting.

$\endgroup$

Not the answer you're looking for? Browse other questions tagged or ask your own question.