What phase of the TCP communication process is attacked during a TCP SYN flood attack?