Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I was reading a research paper entitled "Steps to Defend Against DoS Attacks" when I came across this point:

"A reflection attack on a server would require server-client-server communication, and most clients are not going to respond to a new connection request from a server and hence reflection attacks on server will be prevented"

It was written under the heading of Application of IPv6 addressing aiming to prevent DoS attacks.

My question is that how server-client-server communication is needed for reflection attack on a server?

I Googled for it but couldn't get to answer.

share|improve this question

migrated from stackoverflow.com Dec 27 '12 at 18:04

This question came from our site for professional and enthusiast programmers.

    
I'm the Stack Overflow moderator that just migrated your question. It would be helpful if you could provide a link to the paper, if possible. –  Tim Post Dec 27 '12 at 18:07
    
ieeexplore.ieee.org/xpl/… –  Mughal Walana Dec 27 '12 at 18:16
    
it requires payment to read the paper ... –  schroeder Dec 27 '12 at 20:57

1 Answer 1

A 'Reflection-based DoS Attack' in the traditional sense means that a number of computers spoof their source IP address to the same address (10.1.1.99) who is supposed to be the intended victim, and then the computers connect to a 'reflector' (10.1.1.88). The reflector attempts to respond to all those connection attempts by connecting to the spoofed address, but ends up flooding the victim with unsolicited traffic.

With IPv6, the addressing scheme is designed to prevent spoofing because a portion of the address is supplied by the network(s) the machine is a part of, so these types of attacks could not be launched.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.