Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What defenses are possible against TCP SYN spoofing attacks?

April 26, 2017attacks defenses possible spoofing Syn TCP

0

Posted

What defenses are possible against TCP SYN spoofing attacks?

1 Answer

0

Posted

• Using a modified version of TCP connection handling code. When a SYN packet is sent to the server, the server generates and encodes critical information about the connection and sends a SYN-ACK packet with the cookie attached. If someone responds then the response contains the encoded cookie which the server can decode and reconstruct information about the connection. • Using the “random drop” mechanism which chooses an incomplete connection randomly and drops it. • Changing some TCP configurations like: size of the TCP connections table and the timeout used for removing incomplete entries from the table.