Denial of Service White Papers

Web Spoofing: an Internet Con Game

Overview This paper describes an Internet security attack that could endanger the privacy of World Wide Web users and the integrity of their data. The attack can be carried out on today's systems, endangering users of the most common Web browsers, including Netscape Navigator and Microsoft Internet Explorer. Web spoofing allows an attacker to create a "shadow copy" of the entire World Wide Web. Accesses to the shadow Web are funneled through the attacker's machine, allowing the attacker to monitor all of the victim's activities including any passwords or account numbers the victim enters. The attacker can also cause false or misleading data to be sent to Web servers in the victim's name, or to the victim in the name of any Web server. In short, the attacker observes and controls everything the victim does on the Web. We have implemented a demonstration version of this attack.

Further White Paper Details
PublisherPrinceton University File FormatHTML
Date PublishedAugust 2003 Downloads4
FormatWhite Papers   
Topics

SprintSecure Message Protection Fact Sheet

SprintSecure(sm) Message Protection keeps businesses safe from potential security risks due to the explosive growth of email. Read this solution brief to see how to keep your email assets...

Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service Vulnerabilities

The Secure Shell server (SSH) implementation in Cisco IOS contains multiple vulnerabilities that allow unauthenticated users the ability to generate a spurious memory access error or, in certain cases, reload...

Secure Health Monitoring Network Against Denial-of-Service Attacks Using Cognitive Intelligence

Secure and energy efficient transmission is a main concern in many wireless sensor network applications. In this paper, two types of denial-of-service attacks that affect the routing layer are analyzed...

Combating Spam and Denial-of-Service Attacks With Trusted Puzzle Solvers

Cryptographic puzzles can be used to mitigate spam and Denial-of-Service (DoS) attacks, as well as to implement timed-release cryptography. However, existing crypto puzzles are impractical because: solving them wastes computing...

Is Your Anti-Spam Defense at the Top of its Game?

Spammers continue to change their spam distribution tactics in order to maximize delivery rates for their messages. As a result, educational institutions are being flooded with an increase in...


Quick Sitemap Links: