专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

2. 发明授权

US09015852B2 Protecting address resolution protocol neighbor discovery cache against denial of service attacks 有权
标题翻译：保护地址解析协议邻居发现缓存免受拒绝服务攻击
公开(公告)号：US09015852B2
公开(公告)日：2015-04-21
申请号：US13459818
申请日：2012-04-30
申请人： Pascal Thubert , Eric Levy-Abegnoli , Vincent J. Ribiere
发明人： Pascal Thubert , Eric Levy-Abegnoli , Vincent J. Ribiere
IPC分类号： G06F7/04 , G06F21/10
CPC分类号： H04L63/1458 , G06F21/10 , H04L45/742 , H04L61/103 , H04L61/6009 , H04L61/6059 , H04L2463/142
摘要： In one embodiment, a device (e.g., switch or registry) maintains a binding table for all internet protocol (IP) addresses in a particular subnet associated with the device, and in response to receiving a neighbor solicitation (NS) lookup message from a router for a particular address, determines whether the particular address is within the binding table. When the particular address is not within the binding table, the device causes the router to not store the particular address in a neighbor discovery (ND) cache at the router (e.g., by responding to clear the cache, or ignoring to prevent state from being created). In another embodiment, the ND-requesting router ensures that the particular address is not kept in an ND cache at the router in response to the device indicating that the particular address is not within its binding table (e.g., an explicit response to clear, or absence of instruction to store state).
摘要翻译：在一个实施例中，设备（例如，交换机或注册表）维护与设备相关联的特定子网中的所有互联网协议（IP）地址的绑定表，并且响应于从路由器接收到邻居请求（NS）查找消息对于特定地址，确定特定地址是否在绑定表内。当特定地址不在绑定表内时，设备会使路由器不将特定地址存储在路由器的邻居发现（ND）缓存中（例如，通过响应清除缓存或忽略以防止状态为创建）。在另一个实施例中，ND请求路由器确保特定地址不被保留在路由器处的ND高速缓存中，以响应于设备指示特定地址不在其绑定表内（例如，明确的清除响应或没有指令存储状态）。

IPRDB

热门服务

关于我们

友情链接

联系方式