 - A smurf attack is an exploitation of the Internet Protocol (IP) broadcast addressing to create a denial of service. The attacker uses a program called Smurf to cause the attacked part of a network to become inoperable. The exploit of smurfing, as it has come to be known, takes advantage of certain known characteristics of the Internet Protocol (IP) and the Internet Control Message Protocol (ICMP). The ICMP is used by network nodes and their administrators to exchange information about the state of the network. ICMP can be used to ping other nodes to see if they are operational. An operational node returns an echo message in response to a ping message.
The smurf program builds a network packet that appears to originate from another address (this is known as spoofing an IP address). The packet contains an ICMP ping message that is addressed to an IP broadcast address, meaning all IP addresses in a given network. The echo responses to the ping message are sent back to the "victim" address. Enough pings and resultant echoes can flood the network making it unusable for real traffic.
One way to defeat smurfing is to disable IP broadcast addressing at each network router since it is seldom used. This is one of several suggestions provided by the CERT Coordination Center. The name of the exploit was inspired by a Belgian comic series that was popularized in the United States by Hannah-Barbera during the 1980's.
 |
Learn more about Network Protocols and Security |
| Voice over IP Security: VoIP Threat Taxonomy: In an excerpt from Voice over IP Security, author Patrick Park reviews VoIP threats, including spam, phishing and other threats against social context. |
| Securing VoIP Networks: Threats, Vulnerabilities and Countermeasures: In an excerpt from Securing VoIP Networks: Threats, Vulnerabilities and Countermeasures, authors Peter Thermos and Ari Takanen discuss the strengths and weaknesses of SRTP. |
| Man-in-the-middle attacks: This chapter excerpt examines how man-in-the-middle attacks affect Fibre Channel security and how to determine if your organization is at risk. |
| VoIP Security Learning Guide: More organizations are choosing to implement VoIP telephony for its cost savings. However, securing the technology comes with its own price tag. This guide is a compilation of resources that review ... |
| VoIP protocols: A technical guide: This guide reviews SIP and H.323 and their known vulnerabilities, as well as how functional protocol testing ("fuzzing") can help defeat such problems. |
| CONTRIBUTORS: |
Jeannine Broadwell |
| LAST UPDATED: |
08 Dec 2008
|
 |
Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com
|
|
Show me everything on 
