Networking Task Assessment Questions

Question 3.

A Distributed Denial of Service (DDoS) attack is an attempt to crash a web server or online system by overburdening it with data. It happens by utilizing multiple compromised computer systems as sources of attack traffic and the goal is to render the website or service inoperable.

UDP Flood DDoS attack is the one in which the attacker overwhelms random ports on the targeted host with IP packets containing UDP diagrams.

Since UDP is a connectionless and session-less networking protocol and does not require 3-way handshake and runs with less overhead. It is ideal for traffic that doesn’t need to be checked and rechecked. But these properties make it vulnerable to attack. When there is no initial handshake to establish a valid connection, a high volume of best effort traffic can be executed with few resources.

UDP does not make specific formats for packets and so attackers can create large packets that are filled with junk text or number and send the host being attacked. When the host receives the packets, it checks for the application listening at that port which also associated with the content. When there is no associated application listening, the reply is an ICMP Destination Unreachable packet.