We have published an IETF Internet-Draft entitled “Defending Against Sequence Number Attacks”, which is a revision of Steven Bellovin’s RFC 1948. The Abstract of the I-D is:
This document specifies an algorithm for the generation of TCP Initial Sequence Numbers (ISNs), such that the chances of an off-path attacker of guessing the sequence numbers in use by a target connection are reduced. This document is a revision of RFC 1948, and takes the ISN generation algorithm originally proposed in that document to Standards Track.
Our I-D is available here.
