Secret hashing for TCP SYN/FIN correspondence

No: 7373663
Antragsnr.: 10316883
Einreichungsdatum: 2002-12-12
Ausstellungsdatum: 2008-05-13
Art: B2
Anspruch: 11
Zeichnungsblatter: 3
Zusammenfassung: A mechanism for detecting denial of service attacks in a digital communications system is described. A probabilistically determined portion of input packets of a connection are processed using a hash function to determine whether the packets belong to the flow initiated by a TCP SYN packet. The hash function includes a secret key for additional security. The result of the hash function is added to a value which is dependent on the sequence number of a packet being processed.
Erfinder:
	Robert Jean-Marc (1)
Hauptuntersucher: Smithers Matthew
Hilfsuntersucher: Khoshnoodi Nadia
Beauftragte:
	Alcatel Canada Inc.} (ORG) (10)
Auslandsurkunden:
	1 154 610 / 2001-10-31
Andere Hinweise:
	Snoeren et al., “Hash-Based IP Traceback,” ACM SIGCOMM 2001, pp. 7-11.
	Duffield et al., “Properties and Prediction of Flow Statistics from Sampled Packet Streams,” AT&T Labs-Research, (c)2002 ACM, pp. 159-170.
	“Detecting SYN flooding attacks”, Haining Wang et al., 2002 IEEE.
	“Analysis of a denial of service attack on TCP”, Christoph L. Schuba et al., 1997 IEEE.
Hinweise:
	5542089
	5958053
	6321338

No: