SYN flooding

• attacker sends many TCP SYN packet from forged source address

• victim sends SYN+ACK packets to invalid address

  • gets no response
  • connection hangs in half open state
  • wastes OS resources, possibly crashing system