How is TCP compromised for congestion control attacks?
TCP has a protection mechanism against packet injection in the form of a sequence number included on each packet. By creating such crafted acknowledgments that propagate malicious information about the data received, an attacker can manipulate TCP congestion control into sending data at rates that benefit the attacker.
Does TCP provide congestion control?
To avoid congestive collapse, TCP uses a multi-faceted congestion-control strategy. For each connection, TCP maintains a congestion window, limiting the total number of unacknowledged packets that may be in transit end-to-end.
What are the three major components of the TCP congestion control algorithm?
The algorithm has three major components: (1) slow start, (2) congestion avoidance, and (3) fast recov- ery. Slow start and congestion avoidance are mandatory components of TCP, differ- ing in how they increase the size of cwnd in response to received ACKs.
What are some TCP vulnerabilities?
Mitigations are available, but they do need to be implemented properly to ensure secure TCP/IP use.
- IP address spoofing.
- ARP spoofing.
- Port scanning.
- ICMP attacks.
- Packet reassembly and sequence prediction.
- MitM attacks.
- DoS and DDoS attacks.
What is a TCP Client reset?
TCP reset is an abrupt closure of the session; it causes the resources allocated to the connection to be immediately released and all other information about the connection is erased. TCP reset is identified by the RESET flag in the TCP header set to 1 .
Why is TCP congestion control important?
TCP grabs chunks of size MSS, encapsulates each chunk within a TCP segment, and passes the segments to the network layer for transmission across the network. The TCP congestion window regulates the times at which the segments are sent into the network (i.e., passed to the network layer).