Defending Against Sequence Number Attacks
RFC 1948, “Defending Against Sequence Number Attacks”, is an Informational document published in May 1996 by S. Bellovin. It has been obsoleted by RFC 6528 — refer to the newer document for the authoritative version. The canonical text is published by the RFC Editor.
Abstract
IP spoofing attacks based on sequence number spoofing have become a serious threat on the Internet (CERT Advisory CA-95:01). While ubiquitous crypgraphic authentication is the right answer, we propose a simple modification to TCP implementations that should be a very substantial block to the current wave of attacks. This memo provides information for the Internet community. This memo does not specify an Internet standard of any kind.
What “Informational” means
Published for the general information of the community. It does not define an IETF standard and carries no standards-track status.
The canonical text of RFC 1948 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 1947 Greek Character Encoding for Electronic Mail Messages
- RFC 1949 Scalable Multicast Key Distribution
- RFC 1946 Native ATM Support for ST2+
- RFC 1950 ZLIB Compressed Data Format Specification version 3.3
- RFC 1945 Hypertext Transfer Protocol -- HTTP/1.0
- RFC 1951 DEFLATE Compressed Data Format Specification version 1.3
- RFC 1944 Benchmarking Methodology for Network Interconnect Devices
- RFC 1952 GZIP file format specification version 4.3