Information security – Monitoring or scanning of software or data including attack... – Intrusion detection
Reexamination Certificate
2011-06-28
2011-06-28
Patel, Nirav B (Department: 2435)
Information security
Monitoring or scanning of software or data including attack...
Intrusion detection
C726S011000
Reexamination Certificate
active
07971253
ABSTRACT:
A method for detecting address rotation by a device in a communication network includes receiving, at a first time, a first message transmitted by the device, receiving, at a second time, a second message transmitted by the device, and processing the first message to determine a first sequence number and a first transmitter address. The method also includes processing the second message to determine a second sequence number and a second transmitter address, determining that the second transmitter address is different from the first transmitter address, determining a time gap between the first time and the second time, and determining, based, in part, on the time gap, a sequence threshold value. The method further includes determining a sequence difference between the first sequence number and the second sequence number, determining that the sequence difference is less than the sequence threshold value, and providing an indication of address rotation by the device.
REFERENCES:
patent: 7110756 (2006-09-01), Diener
patent: 7286515 (2007-10-01), Olson et al.
patent: 7302269 (2007-11-01), Crawford et al.
patent: 7307980 (2007-12-01), Shah
patent: 7540028 (2009-05-01), Ahmed et al.
patent: 2003/0185244 (2003-10-01), Wu et al.
patent: 2008/0141369 (2008-06-01), Butti et al.
patent: 2008/0250498 (2008-10-01), Butti et al.
Bellovin: “A Technique For Counting NATed Hots”, AT&T Research, IMW02, Nov. 6-8, 2002, Marseille, France, Copyright 2002, pp. 267-272.
Wright: “Detecting Wireless LAN MAC Address Spoofing”, Jan. 21, 2003, Copyright 2003, Joshua Wright, 20 pgs.
Source code of a wireless monitoring toll available on the Internet, http://svn.kismetwireless.net/code/tags/kismet-2004-10-R1/CHANGELOG, Jun. 9, 2004, 2 pgs.
Guo et al.: “Sequence Number-Based MAC Address Spoof Detection,” in Proceedings of 8th International Symposium on Recent Advances in Intrusion Detection (RAID 2005), Sep. 2005, 20 pgs.
Brian Moran, The hacker's wireless toolbox: part 2, Computerworld, alleged July 17, 2003, http://www.computerworld.com/mobiletopics/mobile/story/0,10801,83152,00.html.
AirTight Networks
AirTight Networks, Inc.
Chaskar Hemant M.
Moran Randal D
Patel Nirav B
LandOfFree
Method and system for detecting address rotation and related... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and system for detecting address rotation and related..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and system for detecting address rotation and related... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2638424