[Outages-discussion] Time protocol vulnerabilities

[Dobbins, Roland]

On Nov 20, 2012, at 11:28 AM, <jrk1231-outml at nym.hush.com> wrote:

> I've always considered NTP as highly vulnerable to attack. 

We also see ntp abused for reflection/amplification attacks (along with DNS and SNMP).  Besides the availability hit to the attack target and the collateral issues on the attack source and intermediate transit networks, the availability of the abused ntpds to serve their legitimate user base is also negatively impacted.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton