Flow-based method for tracking back single packets

Details Flow-based method for tracking back single packets Flow-based method for tracking back single packets

2003-12-10

2009-02-03

Moazzami, Nasser G (Department: 2136)

Information security

Monitoring or scanning of software or data including attack...

C726S006000, C726S026000, C709S224000, C713S187000

Reexamination Certificate

active

07487541

ABSTRACT:
A method and system for tracing-back single packets based on storing only one record per flow, ‘FlowId’, observed by a router on a given interface and in a given time window ‘Time Period’. This record can be seen as a canonical representation for all packets seen during this window. A malicious packet may be traced back to its origin by identifying the port of arrival based on that packet time of arrival X and the FlowId.

REFERENCES:
patent: 6978223 (2005-12-01), Milliken
patent: 2002/0032871 (2002-03-01), Malan et al.
patent: 2002/0042837 (2002-04-01), Ebata et al.
patent: 2004/0030927 (2004-02-01), Zuk
Snoeren et al “Hash-Based IP Traceback” Computer Communication Review,Association for computing machinery. New York, US, vol. 31, No. 4□□(Aug. 27, 2001),p. 1-13□□XP002952661□□ISSN: 0146-4833□□* pp. 1-8*.
Snoeren et al(hash based IP traceback, Aug. 27, 2001).
Snoeren et al, Hash based IP Traceback Aug. 2001.
Duffield, N.G., et al., Trajectory Sampling for Direct Traffic Observation, AT&T Labs, Oct. 2000.
Mahajan, Ratul, et al., Controlling High Bandwidth Aggregates in the Network, AT&T Labs, Jul. 2002.
Snoeren, Axlex C., et al., Hash-Based IP Traceback, BBN Technologies, Feb. 7, 2001.
Yaar, Abraham, et al., Pi: A Path Identification Mechanism to Defend Against DDoS Attacks, Carnegie Mellon University, 2003.
Lipson, Howard F., Tracking and Tracing Cyber-Attacks: Technical Challenges and Global Policy Issues, Carnegie Mellon, Nov. 2002.
Savage, Stefan, et al., Practical Network Support for IP Traceback, University of Washington, Seattle.
Snoeren, Alex C. et al., Hash-Based IP Traceback, BBN Technologies, Aug. 2001.
Bellovin, Steve, et al., ICMP Traceback Messages, AT&T Labs Research, Apr. 2002.

Affiliated with

Also associated with

Rating

Flow-based method for tracking back single packets does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Flow-based method for tracking back single packets, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Flow-based method for tracking back single packets will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4057930