Overview
Network Time Protocol (NTP) packets need to be protected against tampering and forgery because NTP packet attacks may cause network interruptions, synchronization issues, and data loss.
NTP provides the following security policies at the protocol layer to improve security:
- NTP supports the authentication function, which helps defend against error packets and replay attacks.
- NTP supports the whitelist function, which helps defend against DoS attacks. Specifically, packets sent from a port that is not on the whitelist are allocated only a limited default bandwidth, whereas a "whitelist security" tag is created for each known port to achieve quick exchange of packets. This is vital for fast convergence on the network.
- NTP supports access control, which protects each local NTP service by setting the access authority.
Impact on the System
None