Slipping in the Window TCP Reset Attacks.pptVIP

Slipping in the Window: TCP Reset Attacks Paul (Tony) Watson CISSP, CISM, CCSP, CCSE, MCSE+Security, etc, etc… paw@ Agenda Background “Separating Fact from Fud” Facts Fundamentals RFC-793, Window size defaults, ISN Prediction Targets Practical Attack Requirements Estimates Live Testing Results Protecting From Attack / Solutions Fixes The Disclosure Process Thanks and Credits Background Sequence number research Blind spoofing, packet injection, session hijacking Growth in available bandwidth Growth of business dependence on Internet VPN’s, Mail, Web, Database, B2B, etc. DDoS attacks (what