IP Spoofing & SYN Flood

• X establishes a TCP connection with B assuming A’s IP address

A

B

X

(1) SYN

Flood

(2) predict B’s

TCP seq. behavior

SYN(seq=m),src=A

(3)

(4)

SYN(seq=n)ACK(seq=m+1)

(5)

ACK(seq=n+1)

Previous slide

Next slide

Back to first slide

View graphic version