Threat | DoS cont’d

• Example

  • Threat
    • When systems boot, they broadcast a message indicating their identity (IP address)
    • A malicious system can be configured to respond to every such broadcast with “Hey, I’m already using that IP address!”
    • Thus, to avoid an IP conflict, booting system fails to initialize its networking services
  • Recovery
    • Find the box... good luck, they can be very small
    • Disable Proxy ARP service on the system (or remove the system from the LAN)
    • Reboot every affected system