{
  "draft": "draft-ietf-tcpm-rfc1948bis-02",
  "doc_id": "RFC6528",
  "title": "Defending against Sequence Number Attacks",
  "authors": [
    "F. Gont",
    "S. Bellovin"
  ],
  "format": [
    "TEXT",
    "HTML"
  ],
  "page_count": "12",
  "pub_status": "PROPOSED STANDARD",
  "status": "PROPOSED STANDARD",
  "source": "TCP Maintenance and Minor Extensions",
  "abstract": "This document specifies an algorithm for the generation of TCP Initial Sequence Numbers (ISNs), such that the chances of an off-path attacker guessing the sequence numbers in use by a target connection are reduced.  This document revises (and formally obsoletes) RFC 1948, and takes the ISN generation algorithm originally proposed in that document to Standards Track, formally updating RFC 793. [STANDARDS-TRACK]",
  "pub_date": "February 2012",
  "keywords": [
    "TCP security",
    "TCP Sequence Numbers",
    "Sequence Number Randomization",
    "obfuscation",
    "TCP vulnerabilities"
  ],
  "obsoletes": [
    "RFC1948"
  ],
  "obsoleted_by": [
    "RFC9293"
  ],
  "updates": [
    "RFC793"
  ],
  "updated_by": [],
  "see_also": [],
  "doi": "10.17487/RFC6528",
  "errata_url": null
}