i have read about SYN cookies and i understood that they help to avoid DOS .. BUt my prof wants an answer as how SYN cookies can be used to cause DOS and how can it be avoided ? any help woul dbe really appreciated.. thanks in advance
closed as off-topic by David Richerby, Evil, vonbrand, Discrete lizard♦, Yuval Filmus May 19 '18 at 11:05
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "This question does not appear to be about computer science, within the scope defined in the help center." – David Richerby, Evil, vonbrand, Discrete lizard, Yuval Filmus
Computing syncookies requires taking a hash of the server and client's IPs and ports... These hashes may not be inexpensive esp if they are to be cryptographically secure. One way to DOS the syncookie code is to make so many requests that the CPU of the server is exhausted. I believe that Linux uses a less expensive (and not cryptographically secure) hash function, so this is less of an issue.
You could probably also spoof sender IP and use syncookies to be sent to a victim. But that is not that useful/ interesting.