Method for enabling a network-addressable device to detect...

Details Method for enabling a network-addressable device to detect... Method for enabling a network-addressable device to detect...

2006-05-02

2006-05-02

Barron, Jr., Gilberto (Department: 2132)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

C726S014000

Reexamination Certificate

active

07039954

ABSTRACT:
A defense against spoofing vandals is provided, where the defense enlists the network-addressable device whose identity is used by the vandal. A network-addressable device checks incoming messages for communication protocol violations that indicate that a spoofer is using the identity of the network-addressable device. When such a protocol violation is detected, the network-addressable device records attributes of the incoming message in a spoofing logbook database. Further, the network-addressable device increments a counter associated with the identity of the spoofer's target. The value of the counter is compared with a predetermined threshold, in order to determine if the supposed spoofing is an isolated incident or part of a persistent attack. When the value of the counter exceeds the threshold, the network-addressable device constructs a spoofing alert, and sends the spoofing alert to a network administrator. The network-addressable device then rejects the message associated with the protocol violation.

REFERENCES:
patent: 5935249 (1999-08-01), Stern et al.
patent: 6115376 (2000-09-01), Sherer et al.
patent: 6697943 (2004-02-01), Frantz
patent: 6772334 (2004-08-01), Glawitsch

Affiliated with

Also associated with

Rating

Method for enabling a network-addressable device to detect... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method for enabling a network-addressable device to detect..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method for enabling a network-addressable device to detect... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3529647