Defending Against Sequence Number Attacks
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 6
- Abstract
- IP spoofing attacks based on sequence number spoofing have become a serious threat on the Internet (CERT Advisory CA-95:01). While ubiquitous crypgraphic authentication is the right answer, we propose a simple modification to TCP implementations that should be a very substantial block to the current wave of attacks. This memo provides information for the Internet community. This memo does not specify an Internet standard of any kind.
- Publication Date
- 1996-05-01
- Status Note
- Informational
- DOI
10.17487/RFC1948- Link
- https://doi.org/10.17487/RFC1948
- Author(s)
- Steven M. Bellovin
- Keyword(s)
- Cryptography, Authentication, Spoofing
Latest version of IETF RFC 1948
Document Versions — IETF RFC 1948
-
▶ IETF RFC 1948 (1996-05-01)THIS DOC [SUPERSEDED] [LATEST VERSION]
Superseded by:
- RFC6528 — RFC6528 EXTERNAL
Bibliographic Reference(s)
- L. Joncheray, "A Simple Active Attack Against TCP, 1995, Proc. Fifth Usenix UNIX Security Symposium. EXTERNAL
- S. Bellovin, "Security Problems in the TCP/IP Protocol Suite", April 1989, Computer Communications Review, vol. 19, no. 2, pp. 32-48. EXTERNAL
- R.T. Morris, "A Weakness in the 4.2BSD UNIX TCP/IP Software", CSTR 117, 1985, AT&T Bell Laboratories, Murray Hill, NJ. EXTERNAL
- G.R. Wright, W. R. Stevens, "TCP/IP Illustrated, Volume 2", 1995. Addison-Wesley. EXTERNAL
- IETF RFC 793 [Superseded*]
- IETF RFC 854 [Active*]
- IETF RFC 1321 [Active*]
- IETF RFC 1510 [Superseded*]
- IETF RFC 1750 [Superseded*]
- IETF RFC 1825 [Superseded*]
- IETF RFC 1885 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC1948.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 1948, Defending Against Sequence Number Attacks. Available at https://doi.org/10.17487/RFC1948
Snippet:
IETF RFC 1948, Defending Against Sequence Number Attacks. Available at https://doi.org/10.17487/RFC1948
HTML (ISO 690 compliant)
Preview:
IETF RFC 1948, Defending Against Sequence Number Attacks. Available at https://doi.org/10.17487/RFC1948
Snippet:
<span class="citation"><cite>IETF RFC 1948</cite>, Defending Against Sequence Number Attacks. Available at <a href="https://doi.org/10.17487/RFC1948" target="_blank" rel="noopener">https://doi.org/10.17487/RFC1948</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 1948, Defending Against Sequence Number Attacks
doi: 10.17487/RFC1948
url: https://doi.org/10.17487/RFC1948
doi: 10.17487/RFC1948
url: https://doi.org/10.17487/RFC1948
Snippet:
<li> <cite id="bib-rfc1948">IETF RFC 1948</cite>, Defending Against Sequence Number Attacks <span class="doi">10.17487/RFC1948</span> </li>
Referenced By
- IETF RFC 4086 [Active*]
- IETF RFC 4340 [Active*]
- IETF RFC 4346 [Superseded*]
- IETF RFC 5101 [Superseded*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 7217 [Active*]