Types of Attacks on Routers

by Michael Lawrence
Network and resource availability can become compromised due to router attacks.

Network and resource availability can become compromised due to router attacks.

Jupiterimages/Pixland/Getty Images

Routers provide an important role in network communications supporting the exchange of information. Router attacks can take advantage of vulnerabilities in protocols, inconsistencies in router software and weak authentication. Attacks can occur in the form of distributed denial of service and brute force attacks. While they are occurring, attacks impact network services and business operations.

Distributed Denial of Service Attack

As the name suggests, a distributed denial of service attack can use hundreds and potentially thousands of computers to send packets to routers at the same time. The infected computers are referred to as "zombie" hosts. The attacker uses software scripts on each computer’s hard drive to launch the attack. When the attack triggers from the infected computers, they have the ability to target routers and overpower their resources.

Syn Flood

The TCP protocol uses synchronization referred to as TCP/SYN packets for a connection request between computers and servers. When a SYN flood attack occurs, the source computer sends a large number of TCP/SYN packets using a forged address. The destination server on the network is unable to successfully establish a connection to the source due to the address being unreachable. If a router is unable to validate the TCP request, resources can quickly become consumed. This represents a form of denial of service, because the router’s resources can be consumed by the extent of the attack.

Brute Force

Routers can experience a brute force attack when a hacker is attempting to guess the password and gain access. The attacker can use software with a dictionary of words to try and crack the password. Based on the strength of the password and the combinations that are applied to identify a match, the attack could take a short period of time if the password is considerably weak. This type of attack is not limited to a business router; it can also occur whenever a hacker is in range of a home wireless router.

Disgruntled Employee

A disgruntled employee with knowledge of the network topology, router login and password information can access routers without authorization and compromise the network. To prevent this scenario, passwords should be changed regularly and strong access controls should be introduced. It is important routers have consistent and up to date software with strong configurations to reduce their vulnerability from attacks.

About the Author


Photo Credits

  • Jupiterimages/Pixland/Getty Images
bibliography-icon icon for annotation tool Cite this Article