Internet vulnerabilities related to TCP/IP and T/TCP

Abstract

The Internet put the rest of the world at the reach of our computers. In the same way it also made our computers reachable by the rest of the world. Good news and bad news! Over the last decade, the Internet has been subject to widespread security attacks. Besides the classical terms, new ones had to be found in order to designate a large collection of threats: Worms, break-ins, hackers, crackers, hijacking, phrackers, spoofing, man-in-the-middle, password-sniffing, denial-of-service , and so on.Since the Internet was born of academic efforts to share information, it never strove for high security measures. In fact in some of its components, security was consciously traded for easiness in sharing. Although the advent of electronic commerce has pushed for "real security" in the Internet, there are still a large number of users (including computer scientists) that are very vulnerable to attacks, mostly because they are not aware of the nature (and ease) of the attacks and still believe that a "good" password is all they need to be concerned about.Aiming for a better understanding of the subject, we wrote a first paper [1] in which we discussed several threats and attacks related to TCP/IP . The present work is an extension of the first one, and its main goal is to include T/TCP in the discussion. Additionally, in an effort to make this paper more comprehensive, we included some sections from the former.Besides the description of each attack (the what ), we also discuss the way they are carried out (the how ) and, when possible, the related means of prevention, detection and/or defense.

Study on Computer Network Intrusion Effect Evaluation

“…Marco de Vivo et al study the security vulnerabilities related to TCP/IP and T/IP protocol in detail [11], including IP spoofing, TCP hijacking, Packet sniffer and SYN flood etc. Besides the description of each intrusion, the way how they are carried out and, when possible, the related means of prevention, detection and/or defense are also discussed.…”

TCP over Second (2.5G) and Third (3G) Generation Wireless Networks

“…This is specially beneficial for short-lived, transactional (request/ response-style) TCP sessions that typically result from browsing the Web from a smart phone. However, existing solutions such as T/TCP RFC 1644 [27], have not been adopted due to known security concerns [38].…”

Ongoing TCP Research Related to Satellites

“…While T/TCP is safe to implement in shared networks from a congestion control perspective, several security implications of sending data in the first data segment have been identified [ddKI99].…”