Information security – Monitoring or scanning of software or data including attack... – Intrusion detection
Reexamination Certificate
2007-07-18
2011-10-18
Barron, Jr., Gilberto (Department: 2432)
Information security
Monitoring or scanning of software or data including attack...
Intrusion detection
Reexamination Certificate
active
08042183
ABSTRACT:
Disclosed is a method and apparatus for detecting prefix hijacking attacks. A source node is separated from a destination network at a first time via an original path. The destination network is associated with a prefix. At a second time, a packet is transmitted from the source node to the destination network to determine a current path between the source node and the destination network. A packet is also transmitted from the source node to a reference node to determine a reference node path. The reference node is located along the original path and is associated with a prefix different than the prefix associated with the destination network. The current path and the reference node path are then compared, and a prefix hijacking attack is detected when the reference node path is not a sub-path of the current path.
REFERENCES:
patent: 6237037 (2001-05-01), Larsson
patent: 2002/0078202 (2002-06-01), Ando et al.
patent: 2004/0181571 (2004-09-01), Atkinson et al.
Butler, K. et al., “Optimizing BGP Security by Exploiting Path Stability”, 13th ACM Conference on Computer and Communications Security (CCS'06), pp. 298-310, 2006.
Lad, M. et al., “PHAS: A Prefix Hijack Alert System”, 15th USENIX Security Symposium (USENIX Security 2006), 2006.
Ji Lusheng
Pei Dan
Wang Jia
AT&T Intellectual Property II L.P.
Barron Jr. Gilberto
Zecher Cordelia
LandOfFree
Method and apparatus for detecting computer-related attacks does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for detecting computer-related attacks, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for detecting computer-related attacks will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4289594