Preventing network data injection attacks

Details Preventing network data injection attacks Preventing network data injection attacks

2006-09-26

2006-09-26

Barrón, Gilberto (Department: 2132)

Information security

Monitoring or scanning of software or data including attack...

C726S023000, C713S170000, C709S223000, C709S224000

Reexamination Certificate

active

07114181

ABSTRACT:
Approaches for preventing TCP data injection attacks in packet-switched networks are disclosed. A first approach provides for dropping received segments that carry ACK values smaller than the next unacknowledged sequence number expected minus the maximum window size. This approach helps keep spurious injected segments out of the TCP re-assembly buffer. In a second approach, heuristics are used to examine the sequence number of a newly arrived segment, and when the sequence number is the next expected, then the newly arrived segment is used and the contents of the re-assembly buffer are not considered. Further, if the data payload of the newly arrived segment overlaps in sequential order with segments already in the re-assembly buffer, the overlapped segments in the re-assembly buffer are considered spurious and are discarded. Thus, this approach helps remove spurious data from the re-assembly buffer if the first approach somehow fails to prevent the data from entering the re-assembly buffer.

REFERENCES:
patent: 2002/0145976 (2002-10-01), Meyer et al.
patent: 2003/0154399 (2003-08-01), Zuk et al.
patent: 2003/0191844 (2003-10-01), Meyer et al.
patent: 2004/0052234 (2004-03-01), Ameigeiras et al.
Peterson et al.; Computer Networks; Second Edition; Academic Press; 2000; Chapters 2 and 5.
Stewart, R., “Transmission Control Protocol security considerations draft-ietf-tcpm-tcpsecure-00.txt”, Network Working Group (Draft, 2004); pp. 1-10.
“Transmission Control Protocol”,Information Sciences Institute(1981), 89 pages.

Affiliated with

Also associated with

Rating

Preventing network data injection attacks does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Preventing network data injection attacks, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Preventing network data injection attacks will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3529305