
SYN Flood
¨Attacker sends continuous stream of SYN packets to target
¨Target allocates memory on its connection queue to keep track of
half-open connections
¨Attacker does not complete 3-way handshake, filling up all slots on connection queue of target machine
¨If target machine has a very large connection queue, attacker can alternatively send sufficient amount of SYN packets to consume target machine’s entire network bandwidth