ATE485552T1 - Erkennung von netzwerkangriffen - Google Patents

Erkennung von netzwerkangriffen

Info

Publication number
ATE485552T1
ATE485552T1 AT06727631T AT06727631T ATE485552T1 AT E485552 T1 ATE485552 T1 AT E485552T1 AT 06727631 T AT06727631 T AT 06727631T AT 06727631 T AT06727631 T AT 06727631T AT E485552 T1 ATE485552 T1 AT E485552T1
Authority
AT
Austria
Prior art keywords
router
attack detection
network attack
user system
originating user
Prior art date
Application number
AT06727631T
Other languages
English (en)
Inventor
Ruediger Rissmann
Yann Duponchel
Diego Zamboni
James Riordan
Original Assignee
Ibm
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ibm filed Critical Ibm
Application granted granted Critical
Publication of ATE485552T1 publication Critical patent/ATE485552T1/de

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/02—Details
    • H04L12/22—Arrangements for preventing the taking of data from a data transmission channel without authorisation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1491—Countermeasures against malicious traffic using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)
  • Information Transfer Between Computers (AREA)
AT06727631T 2005-03-24 2006-02-21 Erkennung von netzwerkangriffen ATE485552T1 (de)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP05006462 2005-03-24
PCT/IB2006/050554 WO2006100613A1 (en) 2005-03-24 2006-02-21 Network attack detection

Publications (1)

Publication Number Publication Date
ATE485552T1 true ATE485552T1 (de) 2010-11-15

Family

ID=36716621

Family Applications (1)

Application Number Title Priority Date Filing Date
AT06727631T ATE485552T1 (de) 2005-03-24 2006-02-21 Erkennung von netzwerkangriffen

Country Status (9)

Country Link
US (1) US20120096548A1 (de)
EP (1) EP1866725B1 (de)
JP (1) JP4753264B2 (de)
KR (1) KR101090815B1 (de)
CN (1) CN100561492C (de)
AT (1) ATE485552T1 (de)
CA (1) CA2600517A1 (de)
DE (1) DE602006017668D1 (de)
WO (1) WO2006100613A1 (de)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP5476578B2 (ja) * 2009-01-06 2014-04-23 独立行政法人情報通信研究機構 ネットワーク監視システム及びその方法
CN101719906B (zh) * 2009-11-10 2012-05-30 电子科技大学 一种基于蠕虫传播行为的蠕虫检测方法
US10432587B2 (en) * 2012-02-21 2019-10-01 Aventail Llc VPN deep packet inspection

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3618245B2 (ja) * 1999-03-09 2005-02-09 株式会社日立製作所 ネットワーク監視システム
EP1330095B1 (de) 2002-01-18 2006-04-05 Stonesoft Corporation Ueberwachung des Datenflusses zur Verbesserung des Netzwerksicherheitsschutzes
US7752324B2 (en) * 2002-07-12 2010-07-06 Penn State Research Foundation Real-time packet traceback and associated packet marking strategies
JP3794491B2 (ja) * 2002-08-20 2006-07-05 日本電気株式会社 攻撃防御システムおよび攻撃防御方法
JP2004241831A (ja) * 2003-02-03 2004-08-26 Rbec Corp ネットワーク管理システム
WO2004107706A1 (en) * 2003-05-30 2004-12-09 International Business Machines Corporation Detecting network attacks
JP3828523B2 (ja) * 2003-07-16 2006-10-04 株式会社東芝 不正アクセス防御装置及びプログラム
JP2005051588A (ja) * 2003-07-30 2005-02-24 Matsushita Electric Ind Co Ltd 自動フィルタリング方法、および機器
DE60321972D1 (de) * 2003-08-11 2008-08-14 Telecom Italia Spa Verfahren und system zur erkennung einer unbefugten benutzung eines kommunikationsnetzes
US7992204B2 (en) * 2004-05-02 2011-08-02 Markmonitor, Inc. Enhanced responses to online fraud
US7748040B2 (en) * 2004-07-12 2010-06-29 Architecture Technology Corporation Attack correlation using marked information
JP4680931B2 (ja) * 2004-10-19 2011-05-11 富士通株式会社 不正アクセスプログラム監視処理方法、不正アクセスプログラム監視プログラムおよび不正アクセスプログラム監視装置
JP4421462B2 (ja) * 2004-12-06 2010-02-24 三菱電機株式会社 不正侵入検知システムおよび管理装置

Also Published As

Publication number Publication date
EP1866725A1 (de) 2007-12-19
WO2006100613A1 (en) 2006-09-28
JP2008535304A (ja) 2008-08-28
CA2600517A1 (en) 2006-09-28
DE602006017668D1 (de) 2010-12-02
US20120096548A1 (en) 2012-04-19
JP4753264B2 (ja) 2011-08-24
CN101147153A (zh) 2008-03-19
EP1866725B1 (de) 2010-10-20
KR101090815B1 (ko) 2011-12-08
KR20070114155A (ko) 2007-11-29
CN100561492C (zh) 2009-11-18

Similar Documents

Publication Publication Date Title
WO2006091944A3 (en) Location-based enhancements for wireless intrusion detection
ATE459184T1 (de) System und verfahren zur erkennung von eindringungen in ein computernetzwerk
WO2006019701A3 (en) Inline intrusion detection using a single physical port
DE602004021043D1 (de) Verfahren und system zur erkennung von attacken in drahtlosen datenkommunikationsnetzen
ATE533257T1 (de) Nachrichtenverwaltung und unterdrückung in einem überwachungssystem
DE602005001046D1 (de) Erkennung von unerwünschten Nachrichten (SPAM) auf Basis des Nachrichteninhalts
US10701076B2 (en) Network management device at network edge for INS intrusion detection based on adjustable blacklisted sources
ATE429750T1 (de) Überwachung der netzwerkaktivität
WO2007050244A3 (en) Method and system for detecting and responding to attacking networks
WO2008012792A3 (en) A method and system for detection of nat devices in a network
JP2014513834A5 (de)
GB2464429A (en) Location system and method assisting emergency services in identifying the physical location of an IP telephony user
ATE488945T1 (de) Verfahren und vorrichtung zum detektieren eines portscans mit gefälschter quelladdresse
IL194415A0 (en) A method and system for identifying malicious messages in mobile communication networks, related network and computer program product therefor
WO2007120313A3 (en) Insider attack defense for network client validation of network management frames
WO2005101766A3 (en) Method for wireless lan intrusion detection based on protocol anomaly analysis
BR0317286A (pt) Sistema de gerenciamento de conteúdo
WO2004095281A3 (en) System and method for network quality of service protection on security breach detection
WO2008005177A3 (en) Method and apparatus for detecting zombie-generated spam
EP1788779A3 (de) Kommunikationsvorrichtung und Kommunikationsverfahren zur Detektion von Paketmanipulationen
CN103905265A (zh) 一种网络中新增设备的检测方法和装置
ATE456227T1 (de) Verfahren und vorrichtung zum nachweis von weiterleitungsschleifen
ATE530004T1 (de) Mechanismus zur erkennung von bridge-port-mac- adressen in ethernet-netzwerken
ATE485552T1 (de) Erkennung von netzwerkangriffen
WO2005117370A3 (en) Using address ranges to detect malicious activity

Legal Events

Date Code Title Description
RER Ceased as to paragraph 5 lit. 3 law introducing patent treaties