ddos
AI security interview questions tagged ddos, across every topic.
3 questions · 1 unlocked for you
Concepts behind "ddos"
Explanations of the mechanisms these questions rely on.
Foundational
TCP/IP for Security EngineersIP does not authenticate source addresses, so spoofing is possible wherever networks skip ingress filtering, and spoofed UDP becomes reflection and amplification. TCP's handshake and sequence numbers stop an off-path attacker from blindly injecting data, but only probabilistically, and side channels have repeatedly narrowed the odds. Neither layer offers confidentiality or integrity against anyone on the path. Security engineers need these limits to reason about SYN floods, blind resets, off-path DNS poisoning and why every channel worth protecting needs TLS or another authenticated layer above. Network Security
Advanced
HTTP/2, HTTP/3 and Request SmugglingRequest smuggling happens when a front-end and a back-end parse the boundaries of HTTP/1.1 requests differently, so bytes an attacker sends are treated as the start of the next request on a shared connection. HTTP/2 and HTTP/3 use binary framing that removes that ambiguity, but proxies that accept HTTP/2 and forward HTTP/1.1 reintroduce it, and the new protocols bring their own denial-of-service classes, such as Rapid Reset, which drove record attack rates in 2023. Defences are strict parsing that rejects ambiguous framing, HTTP/2 end to end, per-connection budgets for resets and headers, and care with QUIC's 0-RTT and visibility. Application Security🔒 Premium