专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2005072118B1 PREVENTING NETWORK DATA INJECTION ATTACKS USING DUPLICATE-ACK AND REASSEMBLY GAP APPROACHES 审中-公开
标题翻译：使用重复应答和重新组合间隙方法预防网络数据注入攻击
公开(公告)号：WO2005072118B1
公开(公告)日：2006-08-24
申请号：PCT/US2005001020
申请日：2005-01-11
申请人： CISCO TECH INC , RAMAIAH ANANTHA , STEWART RANDALL , LEI PETER , MAHAN PATRICK
发明人： RAMAIAH ANANTHA , STEWART RANDALL , LEI PETER , MAHAN PATRICK
IPC分类号： G06F11/00 , G06F11/22 , G06F11/30 , G06F11/32 , G06F15/173 , H04L9/00 , H04L9/32 , H04L12/56 , H04L29/06
CPC分类号： H04L63/1466 , G06F21/552 , H04L47/27 , H04L47/29 , H04L47/323 , H04L47/34 , H04L63/1416 , H04L63/1458 , H04L69/16 , H04L69/163
摘要： Approaches for preventing TCP data injection attacks in packet-switched networks are disclosed. An ACK message or dummy segment is sent to verify the authenticity of the data in the re-assembly buffer, and to help discard spurious data faster. These approaches involve the sender in detection of spurious data, and make improved use of mechanisms for processing ACK messages that are native to typical TCP implementations. The latter approach may be implemented without modification of the sender's TCP implementation. Further, the receiver's TCP implementation maintains compatibility with RFC 793.
摘要翻译：披露了防止分组交换网络中的TCP数据注入攻击的方法。发送ACK消息或虚拟段以验证重新组装缓冲区中数据的真实性，并帮助更快地丢弃虚假数据。这些方法涉及发送者检测虚假数据，并且改进了使用处理典型TCP实现本地的ACK消息的机制。后一种方法可以在不修改发送者的TCP实现的情况下实现。此外，接收方的TCP实现保持与RFC 793的兼容性。

2. 发明申请

WO2005072118A3 PREVENTING NETWORK DATA INJECTION ATTACKS USING DUPLICATE-ACK AND REASSEMBLY GAP APPROACHES 审中-公开
标题翻译：使用重复ACK和重新组合GAP方法防止网络数据注入攻击
公开(公告)号：WO2005072118A3
公开(公告)日：2006-05-26
申请号：PCT/US2005001020
申请日：2005-01-11
申请人： CISCO TECH INC , RAMAIAH ANANTHA , STEWART RANDALL , LEI PETER , MAHAN PATRICK
发明人： RAMAIAH ANANTHA , STEWART RANDALL , LEI PETER , MAHAN PATRICK
IPC分类号： G06F11/00 , G06F11/22 , G06F11/30 , G06F11/32 , G06F15/173 , H04L9/00 , H04L9/32 , H04L12/56 , H04L29/06
CPC分类号： H04L63/1466 , G06F21/552 , H04L47/27 , H04L47/29 , H04L47/323 , H04L47/34 , H04L63/1416 , H04L63/1458 , H04L69/16 , H04L69/163
摘要： Approaches for preventing TCP data injection attacks in packet-switched networks are disclosed. An ACK message or dummy segment is sent to verify the authenticity of the data in the re-assembly buffer, and to help discard spurious data faster. These approaches involve the sender in detection of spurious data, and make improved use of mechanisms for processing ACK messages that are native to typical TCP implementations. The latter approach may be implemented without modification of the sender's TCP implementation. Further, the receiver's TCP implementation maintains compatibility with RFC 793.
摘要翻译：公开了在分组交换网络中防止TCP数据注入攻击的方法。发送ACK消息或虚拟段以验证重新组装缓冲区中的数据的真实性，并帮助更快地丢弃伪数据。这些方法涉及发送方检测虚假数据，并且改进了用于处理典型TCP实现本地的ACK消息的机制。可以在不修改发送者的TCP实现的情况下实现后一种方法。此外，接收机的TCP实现保持与RFC 793的兼容性。

3. 发明申请

WO2005072117A3 PREVENTING NETWORK DATA INJECTION ATTACKS 审中-公开
标题翻译：防止网络数据注入攻击
公开(公告)号：WO2005072117A3
公开(公告)日：2005-12-22
申请号：PCT/US2005001018
申请日：2005-01-11
申请人： CISCO TECH IND , RAMAIAH ANANTHA , STEWART RANDALL , LEI PETER , MAHAN PATRICK
发明人： RAMAIAH ANANTHA , STEWART RANDALL , LEI PETER
IPC分类号： G06F11/30 , G06F15/173 , H04L9/00 , H04L9/32 , H04L12/56 , H04L29/06
CPC分类号： H04L63/1416 , H04L47/27 , H04L47/29 , H04L47/323 , H04L47/34 , H04L63/1458 , H04L69/16 , H04L69/163
摘要： Approaches for preventing TCP data injection attacks in packet-switched networks are disclosed. A first approach provides for dropping received segments that carry ACK values smaller than the next unacknowledged sequence number expected minus the maximum window size. This approach helps keep spurious injected segments out of the TCP re-assembly buffer. In a second approach, heuristics are used to examine the sequence number of a newly arrived segment, and when the sequence number is the next expected, then the newly arrived segment is used and the contents of the re-assembly buffer are not considered. Further, if the data payload of the newly arrived segment overlaps in sequential order with segments already in the re-assembly buffer, the overlapped segments in the re-assembly buffer are considered spurious and are discarded. Thus, this approach helps remove spurious data from the re-assembly buffer if the first approach somehow fails to prevent the data from entering the re-assembly buffer.
摘要翻译：公开了在分组交换网络中防止TCP数据注入攻击的方法。第一种方法提供丢弃接收的段，其携带ACK值小于预期的下一个未确认序列号减去最大窗口大小。这种方法有助于将伪注入的段保留在TCP重新组装缓冲区之外。在第二种方法中，启发式用于检查新到达的段的序列号，当序列号是下一个预期序列号时，则使用新到达的段，并且不考虑重新组装缓冲区的内容。此外，如果新到达的段的数据有效载荷与已经在重新组装缓冲区中的段按顺序重叠，则重组缓冲区中的重叠段被认为是虚假的并被丢弃。因此，如果第一种方法无法防止数据进入重新组装缓冲区，则此方法有助于从重新组装缓冲区中清除虚假数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式