Security Basics: Re: Why TCP is more secure than UDP?

[pal_adam () gmx net]

Hi 

I dont understand what you mean by spoofing, since wherever you use UDP or TCP the underlying layer still remains IP so 
when you spoof a source you spoof an IP source.
If you talk about a man-in-the-middle attack then taking a closer look at both protocols will show that UDP doesnt 
establish any connection before starting the communication.
Using TCP you`ll need to ACK incomming data using a pre-established sequence number which makes the attack on TCP 
harder but not impossible.


regards 

Adam Pal



-------- Original-Nachricht --------
Datum: 10 Jul 2007 02:11:12 -0000
Von: paavan.shah () gmail com
An: security-basics () securityfocus com
Betreff: Why TCP is more secure than UDP?

> It is said that UDP is considered more vulnerable to spoofing than TCP?
>
>
> Can anyone point me to any document/link which describes TCP is more
> secure than UDP
-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer