Security Basics: RE: Why TCP is more secure than UDP?

From: Goran Pizent <goran.pizent_at_mobilnet.hr>
Date: Tue, 10 Jul 2007 09:06:32 +0200

It's how connection is established.
UDP is fire and forget and therefore attacker can spoof IP address in UDP
packets without any problem.

TCP is different. TCP establish connection through something that is called
"three-was hand shake". Therefore it is much harder (but not entirely
impossible) to spoof IP address in TCP packets

Take a look RFC here:
http://www.faqs.org/rfcs/rfc793.html
http://www.faqs.org/rfcs/rfc768.html

You should probably read some network book e.g. Network Security
Architectures

-----Original Message-----
From: listbounce_at_securityfocus.com [mailto:listbounce_at_securityfocus.com] On
Behalf Of paavan.shah_at_gmail.com
Sent: 10. srpanj 2007 4:11
To: security-basics_at_securityfocus.com
Subject: Why TCP is more secure than UDP?

It is said that UDP is considered more vulnerable to spoofing than TCP?

Can anyone point me to any document/link which describes TCP is more secure
than UDP
Received on Jul 11 2007