TCP Stealth

J. Kirsch; C. Grothoff; J. Appelbaum; H. Kenn

TCP Stealth

J. Kirsch, C. Grothoff, J. Appelbaum, H. Kenn

Research output: Working paper › Professional

56 Downloads (Pure)

Abstract

TCP servers are visible on the Internet to unauthorized clients, as the existence of a TCP server is leaked in the TCP handshake before applications have a chance to authenticate the client. We present a small modification to the initial TCP handshake that allows TCP clients to replace the TCP ISN in the TCP SYN packet with an authorization token. Based on this information, TCP servers may then chose to obscure their presence from unauthorized TCP clients. This RFC documents the specific method for calculating the authorization token to ensure interoperability and to minimize interference by middleboxes. Mandating support for this method in operating system TCP/IP implementations will ensure that clients can connect to TCP servers protected by this method.

Original language	English
Number of pages	10
Publication status	Published - 1 Jan 2015
Externally published	Yes

Access to Document

draftFinal published version, 23 KB

https://datatracker.ietf.org/doc/draft-kirsch-ietf-tcp-stealth/

Cite this

@techreport{9ff6d166f0ba408db9f8af008311bcb9,

title = "TCP Stealth",

abstract = "TCP servers are visible on the Internet to unauthorized clients, as the existence of a TCP server is leaked in the TCP handshake before applications have a chance to authenticate the client. We present a small modification to the initial TCP handshake that allows TCP clients to replace the TCP ISN in the TCP SYN packet with an authorization token. Based on this information, TCP servers may then chose to obscure their presence from unauthorized TCP clients. This RFC documents the specific method for calculating the authorization token to ensure interoperability and to minimize interference by middleboxes. Mandating support for this method in operating system TCP/IP implementations will ensure that clients can connect to TCP servers protected by this method.",

author = "J. Kirsch and C. Grothoff and J. Appelbaum and H. Kenn",

year = "2015",

month = jan,

day = "1",

language = "English",

type = "WorkingPaper",

}

TY - UNPB

T1 - TCP Stealth

AU - Kirsch, J.

AU - Grothoff, C.

AU - Appelbaum, J.

AU - Kenn, H.

PY - 2015/1/1

Y1 - 2015/1/1

N2 - TCP servers are visible on the Internet to unauthorized clients, as the existence of a TCP server is leaked in the TCP handshake before applications have a chance to authenticate the client. We present a small modification to the initial TCP handshake that allows TCP clients to replace the TCP ISN in the TCP SYN packet with an authorization token. Based on this information, TCP servers may then chose to obscure their presence from unauthorized TCP clients. This RFC documents the specific method for calculating the authorization token to ensure interoperability and to minimize interference by middleboxes. Mandating support for this method in operating system TCP/IP implementations will ensure that clients can connect to TCP servers protected by this method.

AB - TCP servers are visible on the Internet to unauthorized clients, as the existence of a TCP server is leaked in the TCP handshake before applications have a chance to authenticate the client. We present a small modification to the initial TCP handshake that allows TCP clients to replace the TCP ISN in the TCP SYN packet with an authorization token. Based on this information, TCP servers may then chose to obscure their presence from unauthorized TCP clients. This RFC documents the specific method for calculating the authorization token to ensure interoperability and to minimize interference by middleboxes. Mandating support for this method in operating system TCP/IP implementations will ensure that clients can connect to TCP servers protected by this method.

M3 - Working paper

BT - TCP Stealth

ER -

TCP Stealth

Abstract

Access to Document

Fingerprint

Cite this