TCP: TCP stands for Transmission Control Protocol which is a standard that establishes and maintain a network conversion with the use of application programs. If one uses TCP, one need to use a minimum of two Round trip time, one round trip to set up the connection for TCP and another round trip for the client to send the request and for the server to send the reply back. SSL: SSL stands for Secure Socket Layer and is a security protocol that establishes link between the web browser and the web server in an online communication. Given Information: Alice and Bob are communicating over an SSL session. An attacker, who does not have any of the shared keys, inserts a bogus TCP segment into a packet stream with correct TCP checksum and sequence numbers and correct IP addresses and port numbers.

Question

Want to see the full answer?

Answer 1

Question

Chapter 8, Problem P21P

Program Plan Intro

TCP:

TCP stands for Transmission Control Protocol which is a standard that establishes and maintain a network conversion with the use of application programs. If one uses TCP, one need to use a minimum of two Round trip time, one round trip to set up the connection for TCP and another round trip for the client to send the request and for the server to send the reply back.

SSL:

SSL stands for Secure Socket Layer and is a security protocol that establishes link between the web browser and the web server in an online communication.

Given Information:

Alice and Bob are communicating over an SSL session. An attacker, who does not have any of the shared keys, inserts a bogus TCP segment into a packet stream with correct TCP checksum and sequence numbers and correct IP addresses and port numbers.

Expert Solution & Answer

Want to see the full answer?

Check out a sample textbook solution

See solution

Students have asked these similar questions

if initial values of the sequence number used by both TCP SYN and SYC/ACK packets are always constant values(e.g., both are 0) it will make the TCP session vulnerable to TCP session hijacking attacks. true or false?

Most modern TCP implementations use pseudo-random number generators (PRNG) to determine starting sequence numbers for TCP sessions. With such generators, it is difficult to compute the ith number generated, given only the (i - 1)st number generated. Explain what network security risks are created if an attacker is able to break such a PRNG so that he can in fact easily compute the ith number generated, given only the (i - 1) st number generated.

Using a TCP SYN spoofing attack, the attacker aims to flood the table of TCP connection requests on a system so that it is unable to respond to legitimate connection requests. Consider a server system with a table for 256 connection requests. This system will retry sending the SYN-ACK packet five times when it fails to receive an ACK packet in response, at 30 second intervals, before purging the request from its table. Assume that no additional countermeasures are used against this attack and that the attacker has filled this table with an initial flood of connection requests. a. At what rate must the attacker continue to send TCP connection requests to this system in order to ensure that the table remains full? b. Assuming that the TCP SYN packet is 40 bytes in size (ignoring framing overhead), how much bandwidth does the attacker consume to continue this attack?