Subject: RE: [AAA-WG]: Diameter vulnerability to connection depletion DoS attacks

From: <[email-masked]>
Date: Tue, 3 Jun 2003 21:00:12 +0300

Hi all,

> draft-ietf-pana-pana-00.txt is taking this attack into account by
> using a stateless cookie mechanism, and a different mechanism is also
> being discussed in the PANA WG.  You may want to check
> http://danforsberg.info:8080/pana-issues/issue15.
> 
> I think dealing with this kind of attack is a design or implementation
> issue of any AAA front-end protocol such as 802.1X and PANA, but not
> necessarily an issue of Diameter or RADIUS.

Also note that SCTP has a similar mechanism built-in, to protect
against TCP syn flooding attacks.

John