|
How safe our machines are in this closely networked world? If a recent report published by the United Kingdom’s Centre for the Protection of the National Infrastructure (CPNI) is be believed, even the latest technical standards in building networks or networking products are not completely safe.
According to the fairly lengthy report titled ``Security assessment of the internet protocol’’, by CPNI, the official documentation of Internet protocols, known as Requests for Comments or RFCs, fail to include solutions to the latest security problems. The 61-page report offers advice on best practices for implementing Internet protocols in a secure manner. Despite having latest technology, Networks and networking products could run foul of undocumented-but known- security problems, the report argues. "Much of the effort of the security community on the Internet protocols did not result in official documents (RFCs) being issued by the IETF (Internet Engineering Task Force) leading to a situation in which 'known' security problems have not always been addressed by all vendors," the report states. "As a result, any system built in the future according to the official TCP/IP specifications might reincarnate security flaws that have already hit our communication systems in the past."
A number of major security design flaws have been found in Internet protocols. Most recently, security researcher Dan Kaminsky discovered a way to attack, using delegation, the weak transaction ID, which identifies domain-name requests.
The preface to the CPNI report also requests feedback from security and Internet experts to further improve the document.
|