A Critique of Port Knocking

NewsForge has an interesting article that critiques port knocking, which is a method of opening and closing service ports on servers via a secret knock sequence. Their conclusion?

In general, port knocking has too many points of potential attack. In particular, anyone with non-root access to the server should be able to trivially break the system. This does not seem to be of concern to the developers.

About Kevin

Kevin Jarnot is a technologist who lives just South of Boston, MA. He is currently employed as Chief Technology Officer at DebtX, a financial services technology company based in Boston.
This entry was posted in Tech. Bookmark the permalink.