Flooding
Pong messages contain IP addresses and port numbers – will other nodes auto-connect?
What if a node claims to be port 80 on
www.cnn.com
?
Query/Push pair is worse – an attacker can induce many sites to try to send a large file to some arbitrary destination.
Similar to “FTP Bounce” attack.
Previous slide
Next slide
Back to first slide
View graphic version