Device, system and method for timestamp analysis of segments...

Details Device, system and method for timestamp analysis of segments... Device, system and method for timestamp analysis of segments...

2007-02-28

2011-11-29

Dada, Beemnet (Department: 2435)

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Particular communication authentication technique

C726S003000

Reexamination Certificate

active

08069352

ABSTRACT:
A method performed in an intrusion detection/prevention system, a system or a device for determining whether a transmission control protocol (TCP) segment in a TCP connection in a communication network is acceptable. The TCP connection can include TCP segments beginning with a three way handshake. A TCP segment can include a field for a timestamp. A timestamp policy of plural timestamp policies is identified, the timestamp policy corresponding to a target associated with the segments in a TCP connection. A baseline timestamp is identified based on a three way handshake in the TCP connection. Segments in the TCP connection are monitored. The segments in the TCP connection are filtered as indicated in the timestamp policy corresponding to the target, the timestamp policy indicating whether the segments are to be filtered out or forwarded to the target by comparing the timestamp of the segments to the baseline timestamp.

REFERENCES:
patent: 4550436 (1985-10-01), Freeman
patent: 4570157 (1986-02-01), Kodaira
patent: 4857912 (1989-08-01), Everett et al.
patent: 4912748 (1990-03-01), Horii et al.
patent: 4985863 (1991-01-01), Fujisawa et al.
patent: 5193192 (1993-03-01), Seberger
patent: 5222081 (1993-06-01), Lewis et al.
patent: 5404488 (1995-04-01), Kerrigan et al.
patent: 5430842 (1995-07-01), Thompson et al.
patent: 5459841 (1995-10-01), Flora-Holmquist et al.
patent: 5495409 (1996-02-01), Kanno
patent: 5497463 (1996-03-01), Stein et al.
patent: 5604910 (1997-02-01), Kojima et al.
patent: 5666293 (1997-09-01), Metz et al.
patent: 5796942 (1998-08-01), Esbensen
patent: 5870554 (1999-02-01), Grossman et al.
patent: 5901307 (1999-05-01), Potter et al.
patent: 5917821 (1999-06-01), Gobuyan et al.
patent: 5919257 (1999-07-01), Trostle
patent: 5963942 (1999-10-01), Igata
patent: 5987473 (1999-11-01), Jorgensen
patent: 5995963 (1999-11-01), Nanba et al.
patent: 5999937 (1999-12-01), Ellard
patent: 6002427 (1999-12-01), Kipust
patent: 6141686 (2000-10-01), Jackowski et al.
patent: 6199181 (2001-03-01), Rechef et al.
patent: 6219786 (2001-04-01), Cunningham et al.
patent: 6320848 (2001-11-01), Edwards et al.
patent: 6321338 (2001-11-01), Porras et al.
patent: 6324656 (2001-11-01), Gleichauf et al.
patent: 6334121 (2001-12-01), Primeaux et al.
patent: 6343362 (2002-01-01), Ptacek et al.
patent: 6393474 (2002-05-01), Eichert et al.
patent: 6415321 (2002-07-01), Gleichauf et al.
patent: 6477648 (2002-11-01), Schell et al.
patent: 6487666 (2002-11-01), Shanklin et al.
patent: 6499107 (2002-12-01), Gleichauf et al.
patent: 6539381 (2003-03-01), Prasad et al.
patent: 6546493 (2003-04-01), Magdych et al.
patent: 6587876 (2003-07-01), Mahon et al.
patent: 6590885 (2003-07-01), Jorgensen
patent: 6678734 (2004-01-01), Haatainen et al.
patent: 6678824 (2004-01-01), Cannon et al.
patent: 6684332 (2004-01-01), Douglas
patent: 6711127 (2004-03-01), Gorman et al.
patent: 6754826 (2004-06-01), Challener et al.
patent: 6766320 (2004-07-01), Wang et al.
patent: 6772196 (2004-08-01), Kirsch et al.
patent: 6789202 (2004-09-01), Ko et al.
patent: 6816973 (2004-11-01), Gleichauf et al.
patent: 6851061 (2005-02-01), Holland et al.
patent: 6957348 (2005-10-01), Flowers et al.
patent: 6983323 (2006-01-01), Cantrell et al.
patent: 6993706 (2006-01-01), Cook
patent: 6999998 (2006-02-01), Russell
patent: 7032114 (2006-04-01), Moran
patent: 7054930 (2006-05-01), Cheriton
patent: 7058821 (2006-06-01), Parekh et al.
patent: 7065657 (2006-06-01), Moran
patent: 7073198 (2006-07-01), Flowers et al.
patent: 7076803 (2006-07-01), Bruton et al.
patent: 7096503 (2006-08-01), Magdych et al.
patent: 7113789 (2006-09-01), Boehmke
patent: 7133916 (2006-11-01), Schunemann
patent: 7134141 (2006-11-01), Crosbie et al.
patent: 7152105 (2006-12-01), McClure et al.
patent: 7174566 (2007-02-01), Yadav
patent: 7181769 (2007-02-01), Keanini et al.
patent: 7257630 (2007-08-01), Cole et al.
patent: 7305708 (2007-12-01), Norton et al.
patent: 7310688 (2007-12-01), Chin
patent: 7313695 (2007-12-01), Norton et al.
patent: 7315801 (2008-01-01), Dowd et al.
patent: 7317693 (2008-01-01), Roesch et al.
patent: 7346922 (2008-03-01), Miliefsky
patent: 7350077 (2008-03-01), Meier et al.
patent: 7363656 (2008-04-01), Weber et al.
patent: 7467202 (2008-12-01), Savchuk
patent: 7596807 (2009-09-01), Ptacek et al.
patent: 7644275 (2010-01-01), Mowers et al.
patent: 2001/0027485 (2001-10-01), Ogishi et al.
patent: 2001/0034847 (2001-10-01), Gaul, Jr.
patent: 2002/0035639 (2002-03-01), Xu
patent: 2002/0066034 (2002-05-01), Schlossberg
patent: 2002/0083344 (2002-06-01), Vairavan
patent: 2002/0087716 (2002-07-01), Mustafa
patent: 2002/0112185 (2002-08-01), Hodges
patent: 2002/0123995 (2002-09-01), Shibuya
patent: 2002/0165707 (2002-11-01), Call
patent: 2003/0009699 (2003-01-01), Gupta et al.
patent: 2003/0014662 (2003-01-01), Gupta et al.
patent: 2003/0046388 (2003-03-01), Milliken
patent: 2003/0065817 (2003-04-01), Benchetrit et al.
patent: 2003/0083847 (2003-05-01), Schertz et al.
patent: 2003/0093517 (2003-05-01), Tarquini et al.
patent: 2003/0101353 (2003-05-01), Tarquini et al.
patent: 2003/0126472 (2003-07-01), Banzhof
patent: 2003/0140250 (2003-07-01), Taninaka et al.
patent: 2003/0195874 (2003-10-01), Akaboshi
patent: 2003/0212910 (2003-11-01), Rowland et al.
patent: 2003/0217283 (2003-11-01), Hrastar et al.
patent: 2003/0229726 (2003-12-01), Daseke et al.
patent: 2004/0010684 (2004-01-01), Douglas
patent: 2004/0015728 (2004-01-01), Cole et al.
patent: 2004/0034773 (2004-02-01), Balabine et al.
patent: 2004/0064726 (2004-04-01), Girouard
patent: 2004/0073800 (2004-04-01), Shah et al.
patent: 2004/0093582 (2004-05-01), Segura
patent: 2004/0098618 (2004-05-01), Kim et al.
patent: 2004/0123153 (2004-06-01), Wright et al.
patent: 2004/0172234 (2004-09-01), Dapp et al.
patent: 2004/0179477 (2004-09-01), Lincoln et al.
patent: 2004/0193943 (2004-09-01), Angelino et al.
patent: 2004/0210756 (2004-10-01), Mowers et al.
patent: 2004/0218532 (2004-11-01), Khirman
patent: 2004/0221176 (2004-11-01), Cole
patent: 2004/0250032 (2004-12-01), Ji et al.
patent: 2004/0268358 (2004-12-01), Darling et al.
patent: 2005/0005169 (2005-01-01), Kelekar
patent: 2005/0015623 (2005-01-01), Williams et al.
patent: 2005/0044422 (2005-02-01), Cantrell et al.
patent: 2005/0076066 (2005-04-01), Stakutis et al.
patent: 2005/0108393 (2005-05-01), Banerjee et al.
patent: 2005/0113941 (2005-05-01), Ii et al.
patent: 2005/0114700 (2005-05-01), Barrie et al.
patent: 2005/0160095 (2005-07-01), Dick et al.
patent: 2005/0172019 (2005-08-01), Williamson et al.
patent: 2005/0188079 (2005-08-01), Motsinger et al.
patent: 2005/0229255 (2005-10-01), Gula et al.
patent: 2005/0240604 (2005-10-01), Corl, Jr. et al.
patent: 2005/0251500 (2005-11-01), Vahalia et al.
patent: 2005/0268331 (2005-12-01), Le et al.
patent: 2005/0268332 (2005-12-01), Le et al.
patent: 2005/0273673 (2005-12-01), Gassoway
patent: 2005/0273857 (2005-12-01), Freund
patent: 2006/0174337 (2006-08-01), Bernoth
patent: 2006/0265748 (2006-11-01), Potok
patent: 2006/0294588 (2006-12-01), Lahann et al.
patent: 2007/0027913 (2007-02-01), Jensen et al.
patent: 2007/0058631 (2007-03-01), Mortier et al.
patent: 2007/0162463 (2007-07-01), Kester et al.
patent: 2007/0192863 (2007-08-01), Kapoor et al.
patent: 2007/0195797 (2007-08-01), Patel et al.
patent: 2007/0271371 (2007-11-01), Singh Ahuja et al.
patent: 2007/0288579 (2007-12-01), Schunemann
patent: 2008/0168561 (2008-07-01), Durie et al.
patent: 2009/0028147 (2009-01-01), Russell
patent: 2009/0041020 (2009-02-01), Gibbons et al.
patent: 2 432 933 (2007-06-01), None
patent: WO 01/37511 (2001-05-01), None
patent: WO 2004/100011 (2004-11-01), None
patent: WO 2005/064884 (2005-07-01), None
patent: WO 2006/025050 (2006-03-01), None
Network Working Group Request for Comments: 1323 Obsoletes: RFC 1072, RFC 1185 V. Jacobson LBL, R. Braden ISI, D. Borman Cray Reseach May 1992.
Office Action issued on Feb. 5, 2008 in connection with the related U.S. Appl. No. 10/843,375.
Spitzner, Lance; Passive Fingerprinting, May 3, 2003; Focus on Intrusion Detection; pp. 1-4; obtained from http://www.ctillh

Affiliated with

Also associated with

Rating

Device, system and method for timestamp analysis of segments... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Device, system and method for timestamp analysis of segments..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Device, system and method for timestamp analysis of segments... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4272504