Improving TCP's Robustness to Blind In-Window Attacks

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 19
Abstract: TCP has historically been considered to be protected against spoofed off-path packet injection attacks by relying on the fact that it is difficult to guess the 4-tuple (the source and destination IP addresses and the source and destination ports) in combination with the 32-bit sequence number(s). A combination of increasing window sizes and applications using longer-term connections (e.g., H-323 or Border Gateway Protocol (BGP) [STANDARDS-TRACK]
Publication Date: 2010-08-01
Status Note: Proposed Standard
DOI: 10.17487/RFC5961
Link: https://doi.org/10.17487/RFC5961
Author(s): Anantha Ramaiah
Randall R. Stewart
Mitesh Dalal
Keyword(s): Vulnerability, Blind Attacks, BGP, Spoofing

Latest version of IETF RFC 5961

Document Versions — IETF RFC 5961

▶ IETF RFC 5961 (2010-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 9293 [Active*]

Normative Reference(s)

IETF RFC 793 [Superseded*]
IETF RFC 2119 [Active*]

Bibliographic Reference(s)

Larsen, M. and F. Gont, "Transport Protocol Port Randomization Recommendations", Work in Progress, August 2010. EXTERNAL
NISCC, "NISCC Vulnerability Advisory 236929 - Vulnerability Issues in TCP". EXTERNAL
Medina, A., Allman, M., and S. Floyd, "Measuring the Evolution of Transport Protocols in the Internet", ACM Computer Communication Review, 35(2), April 2005, < http://www.icir.org/mallman/papers/tcp-evo-ccr05.ps >. EXTERNAL
Watson, P., "Slipping in the Window: TCP Reset attacks", Presentation at 2004 CanSecWest, < http://cansecwest.com/csw04archive.html >. EXTERNAL
IETF RFC 1122 [Active*]
IETF RFC 1323 [Superseded*]
IETF RFC 1948 [Superseded*]
IETF RFC 2385 [Superseded*]
IETF RFC 4271 [Active*]
IETF RFC 4302 [Active*]
IETF RFC 4303 [Active*]
RFC4953 — RFC4953 EXTERNAL
IETF RFC 5927 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5961.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 5961, Improving TCP's Robustness to Blind In-Window Attacks. Available at https://doi.org/10.17487/RFC5961

Snippet:

IETF RFC 5961, Improving TCP&#x27;s Robustness to Blind In-Window Attacks. Available at https://doi.org/10.17487/RFC5961

HTML (ISO 690 compliant)

Preview:

IETF RFC 5961, Improving TCP's Robustness to Blind In-Window Attacks. Available at https://doi.org/10.17487/RFC5961

Snippet:

<span class="citation"><cite>IETF RFC 5961</cite>, Improving TCP&#x27;s Robustness to Blind In-Window Attacks. Available at <a href="https://doi.org/10.17487/RFC5961" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5961</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 5961, Improving TCP's Robustness to Blind In-Window Attacks
doi: 10.17487/RFC5961
url: https://doi.org/10.17487/RFC5961

Snippet:

<li>
<cite id="bib-rfc5961">IETF RFC 5961</cite>, Improving TCP&#x27;s Robustness to Blind In-Window Attacks
<span class="doi">10.17487/RFC5961</span>
</li>

Referenced By

IETF RFC 6269 [Active*]
IETF RFC 6675 [Active*]
IETF RFC 7323 [Active*]
IETF RFC 7414 [Active*]
IETF RFC 9210 [Active*]
IETF RFC 9293 [Active*]
IETF RFC 9768 [Active*]