Why network device?

• Stepping stone
• No malware detection
• Not monitored as closely
• Really old protocols from the 80s
• Port mirroring or tunneling to infiltrate and exfiltrate fata
• Protocol authentication only support MD5

Denial of Service (DoS)

Is a resource consumption attack that wants to attack the availability of a system. DoS is between one attacker and one victim.

→ Link or system overload

SYN Flooding

Wants half-open connections, until the server can’t accept new connections.

Service Request Flooding

Wants to exhaust the servers resources.

Application Level DoS

Is about quality. It want to send bad requests that crash, hang or freeze the server.