首页
登录
从业资格
There are different ways to perform IP b
There are different ways to perform IP b
考试题库
2022-08-02
21
问题
There are different ways to perform IP based DoS Attacks. The most common IP based DoS attack is that an attacker sends an extensive amount of connection establishment( )(e.g. TCP SYN requests) to establish hanging connections with the controller or a DPS. Such a way, the attacker can consume the network resources which should be available for legitimate users. In other( ), the attacker inserts a large amount of( )packets to the data plane by spoofing all or part of the header fields with random values. These incoming packets will trigger table-misses and send lots of packet-in flow request messages to the network controller to saturate the controller resources. In some cases, an(请作答此空)who gains access to DPS can artificially generate lots of random packet-in flow request messages to saturate the control channel and the controller resources. Moreover, the lack of diversity among DPSs fuels fuels the fast propagation of such attacks.Legacy?mobile backhaul devices are inherently protected against the propagation of attacks due to complex and vendor specific equipment. Moreover, legacy backhaul devices do not require frequent communication with core control devices in a manner similar to DPSs communicating with the centralized controller. These features minimize both the impact and propagation of DoS attacks. Moreover, the legacy backhaul devices are controlled as a joint effort of multiple network element. For instance, a single Long Term Evilution(LTE)eNodeB ?is connected up to 32 MMEs. Therefore, DoS/DDoS attack on a single core element will not terminate the entire operation of a backhaul device()the network.A. orB. administratorC. editorD. attacker
选项
A. or
B. administrator
C. editor
D. attacker
答案
D
解析
执行基于IP的DoS攻击,有不同的方法。最常见的基于IP的DoS攻击是攻击者发送大量连接建立请求(例如,TCP SYN请求)以建立与控制器或DPS的挂起连接。这样,攻击者就可以消耗合法用户所需的网络资源。在其他情况下,攻击者通过用随机值欺骗全部或部分头字段,向数据域中插入大量假数据包。这些传入的数据包将触发表丢失,并在流请求消息中发送大量到网络控制器造成控制器资源饱和。在某些情况下,获得DPS访问权的攻击者可以在流请求消息中人为地生成大量随机包,以使控制通道和控制器资源饱和。此外,DPS间的多样性不足也助长了此类攻击的快速传播。传统的移动回程设备由于其复杂性以及是供应商专属设备,天然是防止攻击传播的。此外,传统的移动回程设备不需要与核心控制器频繁通信,而DPS与中央控制器的通信则需要频繁通信。这些特性降低了DoS攻击的影响和传播。此外,传统的回程设备是由多个网络元素共同控制的。例如,单一的长期演化(LTE)基站连接多达32个MME(负责信令处理的关键节点)。因此,对单个核心元素的DoS/DDOS攻击不会终止回程设备或网络的整个操作。
转载请注明原文地址:https://www.tihaiku.com/congyezige/2398725.html
本试题收录于:
高级网络规划设计师题库软件水平考试初中高级分类
高级网络规划设计师
软件水平考试初中高级
相关试题推荐
某服务器软件系统对可用性(Availability)和性能(Performanc
Manyoftheactivitiesperformedduring
Manyoftheactivitiesperformedduring
Manyoftheactivitiesperformedduring
TherearedifferentwaystoperformIPb
TherearedifferentwaystoperformIPb
TherearedifferentwaystoperformIPb
TherearedifferentwaystoperformIPb
TherearedifferentwaystoperformIPb
某服务器软件系统对可用性(Availability)和性能(Performanc
随机试题
[originaltext]W:Ineedacarthisweekend,butminehasbrokendown.M:I’ms
"MigrationfromAsia"TheAsianmigrationhypothesisis
飞机重力的着力点为飞机的()。A.中心 B.重心 C.中点 D.重点
某一网络由于网关故障不能进行Internet接入,采用抓包工具捕获的结果如下图所
场外期权一方通常根据另一方的特定需求来设计场外期权合约,通常把提出需求的一方称为
一种药物能消除或减轻另一种药物的毒性或副作用是指中药配伍中的A.相须 B.相使
林某现任甲县某镇镇长,拟任甲县公安局副局长。应符合的条件有:A.大学本科以上学历
上皮异常增生的病理变化有哪些A:基底细胞呈栅栏状排列 B:基底细胞极性一致
甲在乙拥有使用权的土地上设立地役权并办理了登记,乙将自己的土地使用权让给丙,关于
下列哪项不是卵巢肿瘤的并发症 A.腹水 B.蒂扭转 C.恶变 D.破裂
最新回复
(
0
)