Question

No plagiarism allowed! Need 3-4 sentence answers for each.

• What is a denial-of-service attack? How it can be mitigated and what should be done if a DoS occurs?
• What is ARP poisoning attack. How it can be mitigated and what should be done if an ARP poisoning attack occurs
• What is SLAAC attack. How it can be mitigated and what should be done if a SLAAC attack occurs?

Answer 1

DOS attack

Denial of service attack is a organized/planned kind of attack with the aim of crashing down a server by overloading it by sending huge number of packets or bombing it with requests , it is usually done by sending useless/trash information packets to the targeted server in huge amounts consecutively. It makes a machine or resource unavailable to its the users, so as to target temporary or permanent interruption of services of that server. Eg. a crash on a eccomerce website for even 1minute could lead to potential loss of millions.

We can mitigate dos attack by IP address Whitelisting or Blacklisting blocking Ips from unknown attackers and rate limiting.

ARP poisoning Attack

Address Resolution Protocol poisoning in this the attacker sends false/fake ARP messages through the Local area network LAN.In the consequence, the attacker is able to link the MAC address of his own with the IP address of a legitimate or the target computer on the network.this kind of attack is often used to facilitate other attacks of type Session hijacking, M-I-M attacks,Dos Attacks,DDos attacks.

We can mitigate Arp attack by relying on Virtual Private Networks (VPNs), Using a Static ARP, Setting Up Packet Filtering.

SLAAC Attack

Stateless Address Auto Configuration (SLAAC) is a sudden-6 type attack on the functionality of a network through IPv6 requests, attacker has only one limitation that is to work on the local network of the victim, the router receives IPv6 requests from the host, and then translates those requests and turns them into IPv4 and transfers them along to the target network and by this putting itself in the middle of the flow of the process now the attacker controlling the router is able to observe and modify the traffic.

To mitigate we can layer firewalls and routers that prevent IPv6 communication.