IP Time to Live (TTL) field used as a covert channel

Details IP Time to Live (TTL) field used as a covert channel IP Time to Live (TTL) field used as a covert channel

2003-09-17

2008-08-19

Nguyen, Chau (Department: 2619)

Multiplex communications

Pathfinding or routing

Switching a message which includes an address header

C370S401000

Reexamination Certificate

active

07415018

ABSTRACT:
The Time to Live (TTL) field in an IP header is used as a covert channel in a communication system. More particularly the TTL field can be used to selectively mark packets with unique identifiers as they pass through an upstream station on their way to a downstream station. In this way the source of a traffic flow at least within a particular domain can be absolutely identified. This method of performing a traceback operation doesn't utilize additional resources as it relies on functionality which already exists in the system.

REFERENCES:
patent: 7200673 (2007-04-01), Augart
patent: 2003/0172289 (2003-09-01), Soppera
Abraham Yaar et al: “Pi: A path identification mechanism to defend against DDoS attacks,” Proceedings of the 2003 Symposium on Security and Privacy. (S&P 2003). Berkeley, CA, May 11-14, 2003, Proceedings of the IEEE Symposium on Security and Privacy, Los Alamitos, CA: IEEE Comp. Soc., US May 11, 2003 (pp. 93-107).

Affiliated with

Also associated with

Rating

IP Time to Live (TTL) field used as a covert channel does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with IP Time to Live (TTL) field used as a covert channel, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and IP Time to Live (TTL) field used as a covert channel will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4002406