A Look Back at ?°Security Problems in the TCP/IP Protocol Suite?±
Steven M. Bellovin
AT&T Labs?aResearch
bellovin@acm.org
Abstract
About fifteen years ago, I wrote a paper on security problems
in the TCP/IP protocol suite, In particular, I focused on
protocol-level issues, rather than implementation flaws. It
is instructive to look back at that paper, to see where my focus
and my predictions were accurate, where I was wrong,
and where dangers have yet to happen. This is a reprint of
the original paper, with added commentary.
1. Introduction
The paper ?°Security Problems in the
TCP/IP Protocol Suite?± was originally published
in Computer Communication Review,
Vol. 19, No. 2, in April, 1989. It was a
protocol-level analysis; I intentionally did not
consider implementation or operational issues.
I felt?aand still feel?athat that was the
right approach. Bugs come and go, and everyone?ˉs
operational environment is different.
??1??°TCP/IPD-òéì×?t°2è??êìa?±
?aòa
′ó??ê????ê?°￡??òD′á?ò??a1?óúTCP/ IPD-òé°2è??êìaμ?????￡??òì?±e2à??óúD-òé2???μ??êìa￡???2?ê?êμê?μ?è±?Y?￡??1????a????è·êμ??óD??μ?òaò??￡?ü?éò???μ??òè￥?′?′??à?μ???μ?oí?¤2aê?×?è·μ?￡???à?ê?′íμ?￡??1óD??à?μ??￡??éD?′·￠éú?￡?aê?ò????ú?-à′?????ù′?é??óá??à×￠μ???ó????￡
1.òy??
???????Dμ??°TCP/ IPD-òéì×?tμ?°2è??êìa?±×?3?ê??ú1989?ê4?????????úí¨D??D???·μú19?íμú2o?3?°??￡?aê?ò???D-òé2???μ?·???￡??ò1êòa2?????êμê??òòμ???êìa?￡?ò??μ????òè?è???μ?￡???ê??yè·μ?×?·¨?￡′í?óà′à′è￥è￥￡?′ó?òμ??-óa(chǎn)?·?3ê?2?í?μ??￡μ??a??D-òé2???μ??êìaoü??￡?ì?±eê?è?1?????±￡3?ó?°2×°?ù′?μ???èYD??￡
±???ê??òμ??-′′×÷?·μ???1??￡D?μ??à×￠ò??T3???×?ì?￡?????·?ê???ê??￡3yá?í?3?ê±′ótroffμ?LAT EX×a??ê±?é?@@???μ?′í?ó??ía￡??????-??×?±￡3?2?±??￡?òò??-à??aá?íê??μ?2???￡??′ê1???úóD?üo?μ?°?±??￡μ±è?￡?2???o???oí·?ò3ê?2?í?μ?￡??úêy±￡3?2?±?￡?3yá?ò???D?μ??°?á???°2?·??￡×÷?aò?°?1??ò￡??à×￠?ú?????ùì???μ????ú?￡