countermeasures


implemented in stacks

but not stateful firewalls

syncache

syncookies