A report from a top UK government defence body is calling into question the
security of the basic internet protocol.
The TCP/IP protocol is the basic function used by computers to communicate
with outside networks. First adopted in 1983, the
TCP/IP
system is widely credited with enabling the creation of the internet as we
know it.
The same protocol that enables the internet, however, may also be leaving it
at risk, according to the Centre for Protection of the National Infrastructure
(CPNI)
The company notes that many of the same techniques first used to link up the
Arpanet network in 1983 are still in use today by the modern-day internet, and
not all of them are secure.
"While many textbooks and articles have created the myth that the Internet
Protocols were designed for warfare environments, the top level goal for the
DARPA Internet Program was the sharing of large service machines on the Arpanet,
" read the introduction to the report.
"As a result, many protocol specifications focus only on the operational
aspects of the protocols they specify and overlook their security implications.
"
The CPNI noted that over the years vulnerabilities have emerged in everything
from the handling of headers to dealing with fragments of code and reassembling
data.
Even when those problems are patched, the CPNI pointed out that the fixes are
not always approved or recommended by the Internet Engineering Task Force.
"In many cases vendors have implemented quick 'fixes' to protocol flaws
without a careful analysis of their effectiveness and their impact on
interoperability," the report read.
"As a result, any system built in the future according to the official TCP/IP
specifications might reincarnate security flaws that have already hit our
communication systems in the past."
Do you agree?
Have your say on this article