Common attacks: SYN flood, DNS spoofing, MITM (defense view)

Networking security makes more sense when the attack is explained as abuse of a legitimate protocol assumption. A SYN flood abuses connection-state allocation, DNS spoofing abuses trust in name-to-address answers, and man-in-the-middle attacks exploit a lack of authenticated channel endpoints. Defensive reasoning asks what evidence reveals the abuse and what control reduces the blast radius.