Reflector attacks are a variant of denial-of-service attacks that use unwitting, legitimate servers to flood a target. The attacker spoofs the target's address in legitimate service requests, such as TCP SYN packets. The servers, called "reflectors," reply to these requests, flooding the target. RAD is a novel defense against reflector attacks. It has two variants