NTP users are strongly urged to take immediate action to ensure that their NTP daemon is not susceptible to use in a reflected denial-of-service (DRDoS) attack. Please see the NTP Security Notice for vulnerability and mitigation details, and the Network Time Foundation Blog for more information. (January 2014)

Code Audit

The NTP Codebase undergoes security and defect audits from a number of sources, including:

Area	By	Dates
Protocol and core code	David L. Mills	1985 - present
codebase	http://www.coverity.com	Mar 2006 - present
codebase	http://calysto.org	Jun 2007 - Sep 2008
codebase	http://veracode.com	Feb 2009 - present

Additionally, a number of project developers and interested parties in the Internet Community routinely scan the code looking for problems.