The Centre for the Protection of National Infrastructure (CPNI) released a report recently entitled “Security Assessment of the Internet Protocol.” The report is aimed to raise awareness of security threats that are based on the IP protocol - both current threats as well as future ones. For IT professionals, the report also offers advice on the secure implementation of the IP.

The report highlights that it is difficult to produce a secure TCP/IP implementation now because there is no single document that serves as a security roadmap. And the Internet Engineering Task Force (IETF) did not issue official documents (RFCs) addressing many known security problems, so systems built around “official” specifications may have known security flaws.

This document attempts to rectify that on an ongoing manner, with the preface indicating a willingness to revise this document to keep it as accurate as possible. Security professionals are encouraged to contribute to the accuracy of the data. Revisions of the document will appear here.

Download the report here [PDF]

Via security focus Tags: tcp/ip, ip, internet protocol, web security, internet security, security, it security