Which of the following are special message attacks? (Multiple choice)

Question

Options

• AICMP redirect message attack
• BIP fragmentation attack
• CLand attack
• DIP packet attack with source routing option

• A
  77% (33)
• B
  16% (7)
• C
  7% (3)

Explanation

Options A and D qualify as special message attacks because they exploit specific protocol-level control mechanisms: ICMP redirect messages (A) are legitimate router-to-host control messages that can be forged to silently reroute victim traffic through an attacker-controlled host, while the IP source routing option (D) is a special IP header field that attackers can abuse to dictate a packet's path and bypass perimeter defenses. Both attacks weaponize built-in protocol features that carry special instructions - hence the "special message" classification.

Why B is wrong: IP fragmentation attacks exploit the reassembly process for large packets - this is a structural/protocol-abuse attack, not one tied to a specific control message or option field.

Why C is wrong: The Land attack sends a SYN packet with the source IP spoofed to equal the destination IP, tricking the host into looping responses to itself. This is a DoS/TCP-state exhaustion attack, not a special-message exploit.

Memory tip: Think "special message = special protocol instruction." ICMP redirects instruct a host to change its route; source routing instructs the network on the path to take. If the attack rides on a protocol directive or option field designed to give special orders, it's a special message attack.

No community discussion yet for this question.