会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 4. 发明授权
    • Preventing network reset denial of service attacks
    • 防止网络重置拒绝服务攻击
    • US07458097B2
    • 2008-11-25
    • US11540526
    • 2006-09-28
    • Mitesh DalalAmol KhareRandall Stewart
    • Mitesh DalalAmol KhareRandall Stewart
    • G06F11/00G06F15/16H04L1/00
    • H04L63/1458H04L1/16
    • Approaches for preventing TCP RST attacks and TCP SYN attacks in packet-switched networks are disclosed. In one approach, upon receiving a TCP RST packet, a first endpoint node challenges the second endpoint node in the then-current connection using an acknowledgement message. If the connection is genuinely closed, the second endpoint node responds with a RST packet carrying an expected next sequence value. The first endpoint node takes no action if no RST packet is received. Thus, attacks are thwarted because an attacker does not receive the acknowledgment message and therefore cannot provide the exact expected next sequence value.
    • 公开了在分组交换网络中防止TCP RST攻击和TCP SYN攻击的方法。 在一种方法中,在接收到TCP RST分组时,第一端点节点使用确认消息来挑战当前连接中的第二端点节点。 如果连接真正关闭,则第二端点节点用携带预期下一个序列值的RST分组进行响应。 如果没有接收到RST数据包,则第一个端点节点不采取任何操作。 因此,攻击被阻止,因为攻击者没有收到确认消息,因此无法提供确切的预期下一个序列值。
    • 6. 发明申请
    • Securely managing network element state information in transport-layer associations
    • 在传输层关联中安全地管理网元状态信息
    • US20070091902A1
    • 2007-04-26
    • US11257820
    • 2005-10-24
    • Randall StewartPeter Lei
    • Randall StewartPeter Lei
    • H04L12/56
    • H04L29/12462H04L61/255H04L63/0263H04L67/02
    • Rules in NAT and firewall devices are updated only when a packet flow is verified as genuine through transport-layer message acknowledgment sequences. When a device receives a packet indicating initiation of a new association, the device stores an internal source tag, an internal destination tag, an external source tag, and an external destination tag. Only after receiving a completion acknowledgment message from the destination node, the device sets the internal source tag equal to the external source tag, and sets the internal destination tag equal to the external destination tag. The rules are then updated based on the internal tags. As a result, the approach thwarts denial of service (DOS) attacks that seek to modify rules of NAT and firewall devices to permit harmful traffic.
    • NAT和防火墙设备中的规则仅在通过传输层消息确认序列将数据包流验证为真时才更新。 当设备接收到指示新关联的启动的分组时,设备存储内部源标签,内部目的地标签,外部源标签和外部目的地标签。 只有从目的地节点收到完成确认消息后,设备将内部源标签设置为等于外部源标签,并将内部目的地标签设置为等于外部目的地标签。 然后根据内部标签更新规则。 因此,这种方法阻碍了拒绝服务(DOS)攻击,这些攻击旨在修改NAT和防火墙设备的规则,以允许有害的流量。
    • 8. 发明申请
    • Fast failure detection using RTT time considerations on a non-retransmit medium
    • 在非重传介质上使用RTT时间考虑的快速故障检测
    • US20050088966A9
    • 2005-04-28
    • US09734783
    • 2000-12-11
    • Randall Stewart
    • Randall Stewart
    • H04J3/14H04L12/26H04L12/66
    • H04L12/66H04L43/0811H04L43/0864H04L43/16
    • The present invention provides a method and apparatus to determine the state of a communications link between two nodes in a network. Typically, each node will have an RTT-based value to use, a packets sent counter, and a threshold number to use against the packet sent counter to determine if there is a problem with their communications link. Using the RTT value makes the failure detection sensitive to the actual state of the communications link at any particular time; it also allows the failure detection algorithm to take into account the bursty nature of nodes in a packetized network connection. For each packet received from a non-local node, the local node sets the counter to 0 and starts a new RTT-based time interval. The local node then increments the counter only once, regardless of how many packets it sends to the non-local node, during the RTT-based time interval. Once the time interval is up, the counter is incremented for each packet sent. The counter is compared to the fixed threshold value to determine if it is likely a communications link failure has occurred.
    • 本发明提供一种确定网络中两个节点之间的通信链路的状态的方法和装置。 通常,每个节点将具有要使用的基于RTT的值,分组发送的计数器,以及针对分组发送的计数器使用的阈值数,以确定它们的通信链路是否存在问题。 使用RTT值可使故障检测在任何特定时间对通信链路的实际状态敏感; 它还允许故障检测算法考虑到分组化网络连接中节点的突发性质。 对于从非本地节点接收到的每个数据包,本地节点将计数器设置为0,并启动新的基于RTT的时间间隔。 然而,在基于RTT的时间间隔期间,本地节点将递增计数器一次,而不管其发送到非本地节点的数据包数量。 一旦时间间隔上升,计数器会对每个发送的数据包递增。 将计数器与固定阈值进行比较,以确定是否可能发生通信链路故障。