Padlock
The CPNI has raised questions over the security of the TCP/IP system

Brits blast TCP/IP security

Report questions safety at the heart of the web

Written by Shaun Nichols in San Francisco

Advertisement

A report from a top UK government defence body is calling into question the security of the basic internet protocol.

The TCP/IP protocol is the basic function used by computers to communicate with outside networks. First adopted in 1983, the TCP/IP system is widely credited with enabling the creation of the internet as we know it.

The same protocol that enables the internet, however, may also be leaving it at risk, according to the Centre for Protection of the National Infrastructure (CPNI)

The company notes that many of the same techniques first used to link up the Arpanet network in 1983 are still in use today by the modern-day internet, and not all of them are secure.

"While many textbooks and articles have created the myth that the Internet Protocols were designed for warfare environments, the top level goal for the DARPA Internet Program was the sharing of large service machines on the Arpanet, " read the introduction to the report.

"As a result, many protocol specifications focus only on the operational aspects of the protocols they specify and overlook their security implications. "

The CPNI noted that over the years vulnerabilities have emerged in everything from the handling of headers to dealing with fragments of code and reassembling data.

Even when those problems are patched, the CPNI pointed out that the fixes are not always approved or recommended by the Internet Engineering Task Force.

"In many cases vendors have implemented quick 'fixes' to protocol flaws without a careful analysis of their effectiveness and their impact on interoperability," the report read.

"As a result, any system built in the future according to the official TCP/IP specifications might reincarnate security flaws that have already hit our communication systems in the past."

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

A stressed CIO

28 Aug 2008

9.73 MBComputing podcast 28 August 2008 More...

Virgin Train

22 Aug 2008

8.71 MBComputing podcast 21 August 2008 More...

School children using PCs

14 Aug 2008

9.23 MBComputing podcast 14 August 2008 More...

Poll

GARY MCKINNON EXTRADITION

GARY MCKINNON EXTRADITION

Should Gary McKinnon be extradited to the US for hacking into military computers?

Previous poll results

Spotlight

Hacker

Hacker runs up $12,000 Federal phone bill

Five year-old flaw exploited to place 400 long-distance calls   More...

Steve Wozniak

IDF: Woz on Woz

Apple II co-founder muses on life, love and the meaning...  More...

Prince

Fair use comes first in web video

Dancing baby sets legal landmark   More...

Justin Rattner

IDF: Intel predicts artificial intelligence in 40 years

Computers smarter than humans by 2048   More...

Primary Navigation