System and method for detecting surreptitious packet rerouting
地域：
MD
MD Silver Spring
摘要
Systems and methods of detecting network traffic tampering by monitoring the network traffic for network packets that arrive outside of an allowable error band and rejecting those packets for which transit times are outside the control limits due to possible tampering are provided.
說明書
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
In an embodiment, the packet flow timings may include the amount of time required for the receiving server to process the packet, which contaminates the resulting round-trip timing metric with the processing time. During periods of high server load (e.g. an online retail server on “cyber Monday”), the round trip packet timing may be distorted beyond the control limits.
In some configurations, endpoints may not be accurately identified due to the nature of the IP network address assignments and various networking approaches utilizing dynamic addressing and protocols such as Network Address Translation (NAT), which may increase the difficulty of obtaining accurate metrics.
意見反饋
使用該功能遇到問題