Re: flooding attacks and threats doc (was Re: Comments on draft-bagnulo-multi6dt-hba-00.txt

Erik Nordmark <[email protected]> Fri, 19 Nov 2004 11:10:44 -0800
Newsgroups gmane.ietf.multi6
Message-ID <[email protected]>
Since nobody suggested text, I've added the second paragraph below in 
section 4.3:
<existing paragraph>
An attacker can use the ability to perform redirection to cause
overload on an unrelated third party.  For instance, if A and B
are communicating then the attacker X might be able to convince A to
send the packets intended for B to some third node C.
While this might seem harmless at first, since X could just flood C with
packets directly, there are a few aspects of these attacks that cause
concern.

<added paragraph>
Such an attack might be against the resources of a particular host i.e., C
in the example above, or it might be against the network infrastructure
towards a particular IP address prefix, by overloading the routers or links
even though there is no host at the address being targeted.

   Erik