Improving TCP's Robustness to Blind In-Window Attacks
draft-ietf-tcpm-tcpsecure-13

This Internet-Draft is no longer active. Unofficial copies of old Internet-Drafts can be found here:
http://tools.ietf.org/id/draft-ietf-tcpm-tcpsecure.

Abstract:
TCP has historically been considered to be protected against spoofed off-path packet injection attacks by relying on the fact that it is difficult to guess the 4-tuple (the source and destination IP addresses and the source and destination ports) in combination with the 32-bit sequence number(s). A combination of increasing window sizes and applications using longer-term connections (e.g., H-323 or Border Gateway Protocol (BGP) [STANDARDS-TRACK]

Authors:
Randall Stewart <rstewart@huawei.com>
Mitesh Dalal <mdalal@cisco.com>
Anantha Ramaiah <ananth@cisco.com>

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)