Network-Based Denial of Service Attacks

Craig A. Huegen <chuegen@cisco.com>

NANOG 13 10

References

•Detailed “Smurf” and “Fraggle” information

http://www.quadrunner.com/~chuegen/smurf/

•Ingress filtering

RFC 2276

•Other DoS attacks

See expanded presentation at http://www.quadrunner.com/~chuegen/smurf/980513_dos









	•http://www.quadrunner.com/~chuegen/smurf/ contains extensively detailed information about the “Smurf” and “Fraggle” attacks, including an 8-page white paper on the attacks.

	•http://ds.internic.net/rfc/rfc2267.txt is a recently-published informational RFC describing implementation of filters to protect against origination and reception of some spoofed packets, written by Paul Ferguson and Daniel Senie.

	•http://www.security.mci.net/dostracker/ contains information about the MCI-developed DoSTracker tool designed to automate the process of tracking spoofed packets through a network using Cisco routers.

	•Other references found throughout this presentation also contain a wealth of information about the various attacks.