Suspicious application commands often originate from DoS attacks, malware and:
- Buffer overhangs
- Buffer overlaps
- Buffer overflows
- Buffer overloads
Show answer and solution
Correct answer: C. Buffer overflows
1. Several attack families reach the application protocol.
2. One of them abuses memory handling in the target.
3. Suspicious commands often originate from buffer overflow attacks, DoS attacks and malware.
4. So the answer is buffer overflows.
_Source: NIST SP 800-41 Rev. 1, 'Guidelines on Firewalls and Firewall Policy'_