NTP users are strongly urged to take immediate action to ensure that their NTP daemon is not susceptible to use in a reflected denial-of-service (DRDoS) attack. Please see the NTP Security Notice for vulnerability and mitigation details, and the Network Time Foundation Blog for more information. (January 2014)

NTP>

Main Web>CodeAudit (2009-06-13, HarlanStenn)EditAttach

Code Audit

The NTP Codebase undergoes security and defect audits from a number of sources, including:

Area	By	Dates
Protocol and core code	David L. Mills	1985 - present
codebase	http://www.coverity.com	Mar 2006 - present
codebase	http://calysto.org	Jun 2007 - Sep 2008
codebase	http://veracode.com	Feb 2009 - present

Additionally, a number of project developers and interested parties in the Internet Community routinely scan the code looking for problems.

Topic revision: r1 - 2009-06-13 - 03:39:39 - HarlanStenn

Main