[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Future ISAKMP Denial of Service Vulnerablity Needs Addressing
>From an engineering perspective, time is the core design
principle for CPU cycles and RAM; plus timing states and
other related time/resource issues. Time is the ultimate
resource.....
Hence, Time is of the essence and we are all in agreement.
To say CPU or RAM is key is to agree, very obviously,
that time is underlying critical element, the Zen
of network and computer systems.
It is still not clear what is the way ahead, to insure
that when IPSEC VPNs are in place, that folks of malicious
intent will not have a easy target to effect ISAKMP
UPD 500 (using whatever) to decrease the reliability,
risk and robustness of IPSEC ISAKMP.
Anyone clearly know the way ahead?
Finest Regards,
Neo
Previous>> No. Time is not of the essence. The essential issue is the
Previous>> resources consumed before good requests can be distinguished from
Previous>> bad ones. The most significant resource is CPU power; the
Previous>> secondary one is state memory.
--
---------------------------
The Y2K Feature:
A way of remaining in the 20th century for a little
longer ..... 19 - 100 ... a feature, not a bug :)
Follow-Ups: