Uri software is producing a new defense against DDoS attacks. Their product trac

Question

Uri software is producing a new defense against DDoS attacks. Their product tracks at the soure IP address on all incoming packets, and if it finds any IP address that accounts for more than 1% of traffic over the last hour, it installs an entry in the router that blocks all packets from that address for the next 24 hours. Their marketing teams are claiming that this will stop all DDoS attacks. Please select the attack(s) that will not be stopped by their software:

1. 100 or more zombies flooding the victim network's link (each zombie consumes less than 1% of traffic)

2. Forged source addresses to evade detection.

3. Overwhelm resources at the end host (e.g., CPU, memory, etc) without filling the network pipe.

4. Forged source addresses to look like they come from a singular trusted source. This will prevent the source from accessing the site. For example, if ASU used this software, an attacker could prevent Dr. Jane from being able to reach ASU.edu by sending a large number of packets whose IP addresses have been forged to look like they came from Dr. Jane.

5. None of the above attacks will go through (i.e., all attacks will be blocked by the software).

Explanation / Answer

Answer : The sytem is not fool proof.

If the system can handle more than 100 intstance at a time:

1) 100 or more zombies flooding the victim network's link (each zombie consumes less than 1% of traffic)

This attack will go through.

Related Questions

Navigate

• Browse (All)
• Browse U
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.