Browse by agents
Browse by assignees
Browse by inventors
Browse by examiners
Browse by classes
Advertisements
|
Secret hashing for TCP SYN/FIN correspondence
No:
7373663
|
Application no:
10316883
|
Filed date:
2002-12-12
|
Issue date:
2008-05-13
|
Kind:
B2
|
Claims:
11
|
Drawing sheets:
3
|
Abstract:
A mechanism for detecting denial of service attacks in a digital communications system is described. A probabilistically determined portion of input packets of a connection are processed using a hash function to determine whether the packets belong to the flow initiated by a TCP SYN packet. The hash function includes a secret key for additional security. The result of the hash function is added to a value which is dependent on the sequence number of a packet being processed.
|
Inventors:
|
|
|
Primary examiner:
Smithers Matthew
|
Assistant examiner:
Khoshnoodi Nadia
|
Assignees:
|
|
|
|
Foreign documents:
|
|
|
1 154 610 / 2001-10-31
|
Other references:
|
|
|
Snoeren et al., “Hash-Based IP Traceback,” ACM SIGCOMM 2001, pp. 7-11.
|
|
|
Duffield et al., “Properties and Prediction of Flow Statistics from Sampled Packet Streams,” AT&T Labs-Research, (c)2002 ACM, pp. 159-170.
|
|
|
“Detecting SYN flooding attacks”, Haining Wang et al., 2002 IEEE.
|
|
|
“Analysis of a denial of service attack on TCP”, Christoph L. Schuba et al., 1997 IEEE.
|
References:
|
|
|
5542089
|
|
|
5958053
|
|
|
6321338
|
Patents, Agents, Assignees, Inventors, Examiners, Pdf, Documents, Download
|
Advertisements
|
