HVAC Control in the New Millennium.pdf - HVAC.Amickracing

HVAC Control in the New Millenniumrouted to the attacker before they are transmitted to their final destination.This allows the attacker to monitor all network traffic and becomea middle man.A middle-man attack can come from someone who is working forthe Internet service provider (ISP). This person could gain access to thenetwork packets transferred between the network and any other networkusing packet sniffers and routing or transport protocol software.These attacks could result in the theft of information, hijacking ofinternal network resources, denial of services, corruption of transmitteddata, introduction of new or false information into network sessions,interruption of control and the degradation of network performance.IP SpoofingAn IP-spoofing attack can occur when an attacker outside the networkpretends to be a trusted computer on the system by using an IPaddress that is within the range of IP addresses for the network. Theattacker may also use an authorized external IP address to provide accessto specific resources on the network.IP-spoofing attacks are limited to the injection of data or commandsinto an existing stream of data passed between a client andserver application or a peer-to-peer network connection. For bidirectionalcommunication to exist, the attacker must change all routingtables to point to the spoofed IP address.An attacker can also emulate one of the internal users in the organization.This could include e-mail messages that appear to be official.These attacks are easier when an attacker has a user account and password.But, they are still possible by combining spoofing with a knowledgeof messaging protocols.Denial-of-service AttacksDenial-of-service attacks concentrate on making a service unavailable.This can be done exhausting or slamming a server on the network.Denial-of-service attacks can use Internet protocols, such as TCP and theInternet Control Message Protocol (ICMP).These attacks probe a weakness in the system. Flooding the net-©2001 by The Fairmont Press, Inc. All rights reserved.