Assume a future where security countermeasures against DoS attacks are much more

Question

Assume a future where security countermeasures against DoS attacks are much more widely implemented than at present, ln this future network, antispoofing and directed broadcast filters are widely deployed. Also, the security of PCs and workstations is much greater. making the creation of hot nets difficult. Do the administrators of server systems still have to be concerned about, and take further countermeasures against. DoS attacks? It so. what types of attacks can still occur, and what measures can be taken to reduce their impact?

Explanation / Answer

When deploying any type of project, all risks should be taken into consideration. To calculate risk one must take into account both the impact and potential of the risk. In this future situation while the potential of the risk is assumed to decrease, an impact must still be estimated. This impact/potential multiple will provide a score by which DOS defense can be prioritized with other security risks. The question asks "what types of attacks can still occur." While DOS has been essentially neutralized, there was no statement on more sophisticated attacks such as buffer overflow and code injections which exploit a weakness in a service rather than attempting to overrun its resources. Measures to reduce the impact of these attacks are using intelligent IPS or IDS filters that may be capable of detecting malicious traffic, and by encouraging software developers to employ Best Practices in creating network accessible services. Impact can be further reduced by sandboxing each of these services, so that if one service is compromised the entire host on which it runs may remain secure.

Related Questions

Navigate

• Browse (All)
• Browse A
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.