What Is Denial Of Service Attack

DNS spoofing, also called as DNS cache poisoning. It is a form of hacking in which unethical Domain Name System data is familiarized into a DNS resolver's cache, triggering the name server to yield an incorrect IP address, distracting the traffic to the invader's computer. Spoofing attacks can cause severe safety difficulties for DNS servers susceptible to such attacks. For example, instigating users to be focused to wrong Internet websites or e-mail being directed to unauthorized mail servers. Without being observed, a spoofing attack can continue for a long period.

The purpose of this paper is to touch on the issue of Hacking. It will go into detail about the history, evolution, future and prevention of Hacking. In addition, this paper will discuss different types of hackers and their motivation behind hacking. This paper examines the major impact caused by malicious hackers and give modern examples of such attacks. To conclude, it will predict how hacking will be in the near future and give the precautionary measures Information Security professionals can take to mitigate the risk of being victimized.

To begin we must first understand what a Distributed Denial of Service attack is. A DDoS attack per Arbor Network is a n attempt to make an online service unavailable by overwhelming it with traffic from multiple resources (1). With that there are four common categories for the attack types, connection attacks, volumetric attacks, fragmentation attacks, and application attacks (“What Is a DDoS Attack” 1). Connection attacks are an attempt to use up all available connections to the infrastructure devices, to include but not limited to load-balancers and application servers (“What Is a DDoS Attack” 1). The attack is set up to use all the potential connections to stop everyone from being able to connect to a site or service by keeping all the connections open to the attacker’s bot army.

Denial of service (DoS) and distributed denial of service (DDoS) attacks have the same effect, however a distributed denial of service (DDos) attack:

Encrypted Outbound Sessions – an encrypted interactive session by an adversary which takes advantage of less restrictive outbound connections

A backdoor is “a means by which a developer or user reenters a computer system at a later date and time, without going through the normal security processes”. When someone use, or created a backdoor they are trying to hide evidences of their unauthorized access to the system. What is intrusion detection system? Intrusion detection system or IDS is “a computer security system that is intended to detect attacks on systems and to detect the unauthorized use of such systems, networks, and related resources”. Another thing we can find evidence from is the

Attack: An assault on the system security that is derived from an intelligent threat. An attack is any action that violated security.

We are living in the world where we are required to yield our personal data information to authority or companies such as names, date of birth, social security number or even credit numbers (Magalhaes, 2012). We may be aware that the personal data can expose to unauthorized people if our data is not secure properly, either via wire or wireless network. Lost or stolen data has been seen while data is transferred between different users using both networks. Can we trust companies to keep our data safe from being lost or misuse? Yes, we can. With new cyber-crime laws are enforced, it is in the company's best interest to keep their customers' data more secure (Magalhaes, 2012). This article will summarize the major security risks and threats to

Alternative type of attack is called a Distributed Denial of Service (DDoS) attack. DDoS attacks are launched form numerous linked devices that are spread across the Internet. They are commonly harder to deflect, because of their sheer volume of devices involved. Unlike DoS attacks, DDoS assaults be apt to target the system infrastructure in an effort to drench it with huge volumes of traffic.

Spoofing deceives the system so that it recognizes an intruder as an authorized user by falsifying data ( Evans et al. 2016). The victim will not be aware of the hoax because his connection will not be affected. Spoof attacks include; emails spoofs, caller ID spoofs. They are used to steal someone's identity, and the people vulnerable are customers who do all activities online like accessing bank accounts and using credit cards to buy things online.

The denial of service attack has become prominent against banks. The sinister attack claimed two victims and they were banks. According to Wells Fargo bank and PNC bank customers slow internet traffic when trying to access their online accounts. This was due mainly to an unusual high amount of traffic causing slow internet access to the banks website. Wells Fargo and PNC both launched an investigation into the incident that was annoyance for the most part to customers trying to conduct business online. Their findings were that a Distributed Denial of Service (DDoS) attack against both banks causing a disruption in service to customer. According to Koga, Okazaki, Watanabe, and Park (2011) denial of service poses security problems on the internet. They recommend that countermeasure should take place to trace the attackers and stop the attacks (p. 29).

A Trojan horse is a program or utility that looks as though it would be useful and safe to use but actually it is carrying out tasks which give others access to your computer. Trojans are usually found built in to another program so that it is not easily discovered. The Trojan will then run when the program that it is built into is running. Trojans are not easily discovered by antivirus software because they are written in to the code of another program.

Phishing is where the gullible user is brought to a simulation of the actual site but with a minor difference. Example: “google.com and googIe.com, (where the lowercase l has been replaced by an uppercase

Botnets can happen globally, the bots can locate and attack any source that the hackers want to overwhelm with hundreds and thousands of interference messages. The interference can come from different ways, including SPAM, Smurfs, Teardrops, or the Ping of Death. The botnet is generating an overflow of traffic or an automated flooding of a target that a hacker handpicked. Botnets have some ways they can do this. The flooding can happen when someone generates a request that sends to the server that it cannot handle. Also, the hackers can have multiple or thousands of computers that send random amounts of data to the target. Both of these ways will disable your connection. This is using up all of the servers’ bandwidth, which is making the computer vulnerable for notifications. These are the main ways that the attacks are happening. DDoS attacks are so successful it can max out a country’s international cable capacity (Digital Attack Map).

Ali et al.[16] in this paper author describes the types of DOS attack which include flood attack (intruder flood the server with a lot of requests), Ping of death (using a bug or security hole for attack), Teardrop (excessive size of packets), SYN attack, (filling SYN buffer and not receiving acknowledgement), smurf attack (searching for broadcast server), Snork attack (does not allow NT system to work with full performance). Technique of DDOS attack is master using slave computers to attack the victim. Methodology proposed is implement filters and used Dynamic windows scheme; message (m), distance (da), size (w). If da>w then forwarding first mode can be used and if da >= w then authentication first mode can be used. If authentication