Dynamically changing port numbers every few seconds?

A

AMD_Gamer

Fully [H]
Joined
Jan 20, 2002
Messages
18,287
I was just think a out how the RSA tokens work and wondering if a similar concept could be applied to ports running on a server/device. Lets say you have a server of some kind and a client that connects to it. What if the server was to change the port it used every few seconds and the client could keep in sync with that? Would that be a pretty good security measure?

An attacker would have to know what port it was using at the exact time and if the attacker was lucky to get in then within a few seconds his communication with that server would be lost as the port would change.

Does anything like this already exist?
 
BT can randomize its ports everytime it launches, but I don't think the two are any way related. Regardless.

This might have some function, but why not just do biometrics as one of your factors and something like a phone / keytag system as your 2nd.

If those two get defeated, you're probably not playing with kiddies any longer anyway
 
if the attacker is able to intercept the network stream going from client to server its not going to care what port they talk on, all port is is a part of the TCP packet, they'll just record EVERYTHING so changing ports wouldn't matter one bit if you just changed ports
 
it also wouldn't work with applications that require a constant connection. Every time the port changed you'd have to reestablish your connection to the server (a relatively expensive operation). It might work for "transactional" systems where you connect, do something, then close the connection.
 
You must log in or register to reply here.
Back
Top