API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 4953
[ACTIVE]

Defending TCP Against Spoofing Attacks

Metadata

Publisher
IETF
Doc Type
Informational
Pages
28
Abstract
Recent analysis of potential attacks on core Internet infrastructure indicates an increased vulnerability of TCP connections to spurious resets (RSTs), sent with forged IP source addresses (spoofing). TCP has always been susceptible to such RST spoofing attacks, which were indirectly protected by checking that the RST sequence number was inside the current receive window, as well as via the obfuscation of TCP endpoint and port numbers. For pairs of well-known endpoints often over predictable port pairs, such as BGP or between web servers and well-known large-scale caches, increases in the path bandwidth-delay product of a connection have sufficiently increased the receive window space that off-path third parties can brute-force generate a viable RST sequence number. The susceptibility to attack increases with the square of the bandwidth, and thus presents a significant vulnerability for recent high-speed networks. This document addresses this vulnerability, discussing proposed solutions at the transport level and their inherent challenges, as well as existing network level solutions and the feasibility of their deployment. This document focuses on vulnerabilities due to spoofed TCP segments, and includes a discussion of related ICMP spoofing attacks on TCP connections. This memo provides information for the Internet community.
Publication Date
2007-07-01
Status Note
Informational
DOI
10.17487/RFC4953
Link
https://doi.org/10.17487/RFC4953
Author(s)
Dr. Joseph D. Touch
Keyword(s)
TCP
Latest version of IETF RFC 4953

Document Versions — IETF RFC 4953

  • ▶ IETF RFC 4953 (2007-07-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4953.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 4953, Defending TCP Against Spoofing Attacks. Available at https://doi.org/10.17487/RFC4953
Snippet:
IETF RFC 4953, Defending TCP Against Spoofing Attacks. Available at https://doi.org/10.17487/RFC4953

HTML (ISO 690 compliant)

Preview:
IETF RFC 4953, Defending TCP Against Spoofing Attacks. Available at https://doi.org/10.17487/RFC4953
Snippet:
<span class="citation"><cite>IETF RFC 4953</cite>, Defending TCP Against Spoofing Attacks. Available at <a href="https://doi.org/10.17487/RFC4953" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4953</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 4953, Defending TCP Against Spoofing Attacks
doi: 10.17487/RFC4953
url: https://doi.org/10.17487/RFC4953
Snippet:
<li>
<cite id="bib-rfc4953">IETF RFC 4953</cite>, Defending TCP Against Spoofing Attacks
<span class="doi">10.17487/RFC4953</span>
</li>

Referenced By