RE: Why TCP is more secure than UDP?

["Goran Pizent" <goran.pizent () mobilnet hr>]

It's how connection is established.
UDP is fire and forget and therefore attacker can spoof IP address in UDP
packets without any problem.

TCP is different. TCP establish connection through something that is called
"three-was hand shake". Therefore it is much harder (but not entirely
impossible) to spoof IP address in TCP packets 

Take a look RFC here:
http://www.faqs.org/rfcs/rfc793.html
http://www.faqs.org/rfcs/rfc768.html

You should probably read some network book e.g. Network Security
Architectures




-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of paavan.shah () gmail com
Sent: 10. srpanj 2007 4:11
To: security-basics () securityfocus com
Subject: Why TCP is more secure than UDP?

It is said that UDP is considered more vulnerable to spoofing than TCP?

Can anyone point me to any document/link which describes TCP is more secure
than UDP