• Embed Doc
  • Copy Link
  • Readcast
  • Collections
  • CommentGo Back
Download
 
PACKET ATTACKS - VERSION 1.1Let me start by saying the internet is full of wonderful tools and papers likethis one. Alot of these things can help youincrease your knowledge, perhaps your job or more. But just as easily as you canlearn from them, people read into them tomuch and decide to harm other peoples work for no apparent reason. Let it be knownthat is in no way the purpose of thispaper. A true hacker is one who strives to attain the answers for themselvesthrough curiosity. Its the path we take tothose answers that makes us hackers, not destruction of other peoples work. Sowith that said, please enjoy my work, as Ihave enjoyed writing it.The flow of data has always captured my interest. Just how does it work, how canwe dissect it and use it to our advantage.Well I have spent a long time studying all of this, and that is why I wrote thispaper. It's a collection of run on sentences on different packet attacks and how they work. Now we all know you canlearn all you ever wanted to know about thespecifications of a protocol by reading its 30 page RFC document. But that is theprotocol according to design, in the wildits a different story all together. 'Packet Attacks' covers everything from basicDOS attacks to TCP/IP hijacking. Hence thename "Packet Attacks". This paper also focuses not just on attacks but practicalways to prevent such attacks and ideas onnew methods to help us stop them and secure our networks.Introduction:TCP/IP Packet Switching NetworksOSI MODEL---Chapter 1.---Section a.Introduction to DDOS/DOS & Packet AttacksSection b.How attacks are crafted---Chapter 2.---Section a. (attacks)ICMPSmurfSYN/ACKUDPDNSARPDrDOSSpecial Bot / TrojansWorm DOSUnicode ping flood (new!)Section b.PhasingSection c. (hacks)TCP hijacking
 
SniffingScansInformation gathering / FootprintingSection d.Defense against these attacksAttack DetectionIntrusion DetectionSection e.IPSECNAT as a means of security---Chapter 3.---Section a.The future of TCP/IP as a means of using IPv6 ---Chapter 4. ---Section a.New security application / protocol-----Introduction.Well I assume most of you reading this paper already have a good understanding ofTCP/IP and how it works so I wont get tomuch into detail on that, but I will scrape the surface on the parts we NEED todiscuss. The internet is a MASSIVE web ofmachines all connected to one another through a series of hardware devices knownas routers, switches, hubs, bridges andlots more. All of these devices (although some are smarter then others) push alongpackets. Our operating systems andapplications craft these packets in order to send data to one another over thewire. Each packet, although varying in size,carries a small bit of data to and from one host to another. Each packet must alsocarry its own personal information suchas where it came from and where its headed. Of course there is a lot more to apacket then just this information. But as faras attacks go this is the crucial information we need to look at. Now there aremany many different types of protocols thatcraft many different types of packets. And they are all read differently when theyare received at the other end. Where asan ARP packet may tell a host who has this MAC address on this subnet, a TCPpacket might transfer the last few bits in thatMP3 your downloading. Regardless the data, all of these packets use the same wireto move to and from locations. I couldn'tpossibly discuss every protocol and packet structure in this one paper. Theaverage end user takes for granted all of thisrunning in the background while they surf the net. Most people dont understand thecomplexity of this internet we are all sofamiliar with, the chat rooms etc. But there are people who do, and there arepeople who take advantage of that. Reverseengineering has led to the creation of attacks using the basic fundamentals theseprotocols rely on. And since TCP/IP is soembedded in our infrastructure we must adapt and learn to defend each new attack.OSI MODELOpen Systems Interconnection model, is a seven layered networking design. Its anindustry standard that defines exactly how
 
data is transffered between protocol to protocol. Not every protocol follows theOSI model exactly and some do. TCP theinternets main mode of data transport does not follow it exactly. Let me take youthrough a brief over view of the OSI model.Layer Seven : Application LayerThis layer is obviously application specific, it provides everything fromauthentication to email to ftp and telnet, thelist goes on. Its specifically for end user processes, what we input into ourapplications we can see on our screens.Layer Six : Presentation LayerThis layer changes and possibly encrypts the data so that the application layercan understand it. (you will understand whatthis means in a few minutes)Layer Five : Session LayerThink of this layer as Establishment, Control and Termination of the sessionsformed by theapplication(client) to a remote host(server).Layer Four : Transport LayerThis layer is responsible for the invisible transfer of data between host to host.It is there to ensure all data transfergoes accordingly. The protocols used are, UDP and TCP.Layer Three : Network LayerThis layer is for error correction, packet sequencing, and for transmitting datafrom node to node. Addressing is alsoanother function of this layer in inter-networking.Layer Two : Data Link LayerThis layer decodes and encodes packets into bits so they are ready for thephysical layer. It also handles error correctionin the physical layer. This layer is also divided into two different sub-layers.The LLC (logical link control) and MAC(media access control) sub layers. The LLC sub layer provides control for framesynchronization and error checking. The MACsub layer controls how a computer on your network has access to data.Layer One : Physical LayerThis layer is the actual movement of the data. Using electrical impulse or someother form of data movement is pushes thebit stream towards the other host. This layer is the hardware level, the ethernetcard, the wire etc. There are manyprotocols within this layer.You may ask yourself why I listed these from 7 to 1. Well I did to show you howthe OSI model really works. Layer Sevenreally comes first, the end user types something into his instant messenger (forexample) and the data flows down throughthe OSI model being encapsulated and changed at every level it has to be changedor corrected at. The data travels the wireand at the other end it moves back up the OSI model all the way back up to layerseven where the other host can read it inthe original form it was sent. So theres a VERY basic understanding of the OSImodel and how it works to transmit data fromhost to host. There is alot more protocols and parts to the OSI model but this
of 00

Leave a Comment

You must be to leave a comment.
Submit
Characters: ...
You must be to leave a comment.
Submit
Characters: ...