WO2007010101A3 - Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication - Google Patents

Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication Download PDF

Info

Publication number
WO2007010101A3
WO2007010101A3 PCT/FR2006/001508 FR2006001508W WO2007010101A3 WO 2007010101 A3 WO2007010101 A3 WO 2007010101A3 FR 2006001508 W FR2006001508 W FR 2006001508W WO 2007010101 A3 WO2007010101 A3 WO 2007010101A3
Authority
WO
WIPO (PCT)
Prior art keywords
detecting
intrusion
data packets
fra
telecommunication network
Prior art date
Application number
PCT/FR2006/001508
Other languages
English (en)
Other versions
WO2007010101A2 (fr
Inventor
Laurent Butti
Roland Duffau
Franck Veysset
Original Assignee
France Telecom
Laurent Butti
Roland Duffau
Franck Veysset
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by France Telecom, Laurent Butti, Roland Duffau, Franck Veysset filed Critical France Telecom
Priority to US11/988,558 priority Critical patent/US20090138971A1/en
Priority to EP06778701A priority patent/EP1902563A2/fr
Publication of WO2007010101A2 publication Critical patent/WO2007010101A2/fr
Publication of WO2007010101A3 publication Critical patent/WO2007010101A3/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
    • H04W12/122—Counter-measures against attacks; Protection against rogue devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/26—Network addressing or numbering for mobility support
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W84/00—Network topologies
    • H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10—Small scale networks; Flat hierarchical networks
    • H04W84/12—WLAN [Wireless Local Area Networks]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W92/00—Interfaces specially adapted for wireless communication networks
    • H04W92/04—Interfaces between hierarchically different network devices
    • H04W92/10—Interfaces between hierarchically different network devices between terminal device and access point, i.e. wireless air interface

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

L'invention propose une détection d'intrusion de type 'Man-ln-The-Middle' entre une entité (CL) et un point d'accès (AP) d'un réseau notamment selon la norme IEEE-802.11. Elle propose à cet effet les étapes suivantes : a) lire les corps de trames (FRA-i,... ,FRA-i+3) transmises entre l'entité et le point d'accès, b) détecter des trames (FRA-i,FRA-i+2) transmises à des instants respectifs distincts, mais comportant pourtant des corps de trames (fb) identiques, c) et déclencher une alarme en cas de détection positive à l'étape b).
PCT/FR2006/001508 2005-07-13 2006-06-28 Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication WO2007010101A2 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US11/988,558 US20090138971A1 (en) 2005-07-13 2006-06-28 Detecting Intrusion by Rerouting of Data Packets in a Telecommunications Network
EP06778701A EP1902563A2 (fr) 2005-07-13 2006-06-28 Detection d une intrusion par detournement de paquets de donnees dans un reseau de telecommunication

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR0507532A FR2888695A1 (fr) 2005-07-13 2005-07-13 Detection d'une intrusion par detournement de paquets de donnees dans un reseau de telecommunication
FR0507532 2005-07-13

Publications (2)

Publication Number Publication Date
WO2007010101A2 WO2007010101A2 (fr) 2007-01-25
WO2007010101A3 true WO2007010101A3 (fr) 2007-03-29

Family

ID=36297263

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FR2006/001508 WO2007010101A2 (fr) 2005-07-13 2006-06-28 Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication

Country Status (4)

Country Link
US (1) US20090138971A1 (fr)
EP (1) EP1902563A2 (fr)
FR (1) FR2888695A1 (fr)
WO (1) WO2007010101A2 (fr)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120030759A1 (en) * 2010-07-28 2012-02-02 Alcatel-Lucent Usa Inc. Security protocol for detection of fraudulent activity executed via malware-infected computer system
US9313655B2 (en) * 2011-10-31 2016-04-12 Nokia Corporation Location privacy in communication networks
US10620241B2 (en) 2012-02-17 2020-04-14 Perspecta Labs Inc. Method and system for packet acquisition, analysis and intrusion detection in field area networks
WO2013123441A1 (fr) * 2012-02-17 2013-08-22 Tt Government Solutions, Inc. Procédé et système d'acquisition de paquets, analyse et détection d'intrusion dans des réseaux de zone de champ
US10097417B2 (en) 2013-01-24 2018-10-09 Vencore Labs, Inc. Method and system for visualizing and analyzing a field area network
CN106790299B (zh) * 2017-03-20 2020-06-23 京信通信系统（中国）有限公司 一种在无线接入点ap上应用的无线攻击防御方法和装置
US10853457B2 (en) * 2018-02-06 2020-12-01 Didi Research America, Llc System and method for program security protection

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2003065186A1 (fr) * 2002-01-31 2003-08-07 3Com Corporation Systeme de surveillance de reseau
US20040151382A1 (en) * 2003-02-04 2004-08-05 Tippingpoint Technologies, Inc. Method and apparatus for data packet pattern matching
US20050044422A1 (en) * 2002-11-07 2005-02-24 Craig Cantrell Active network defense system and method

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2002071227A1 (fr) * 2001-03-01 2002-09-12 Cyber Operations, Llc Systeme et procede anti-piratage de reseau

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2003065186A1 (fr) * 2002-01-31 2003-08-07 3Com Corporation Systeme de surveillance de reseau
US20050044422A1 (en) * 2002-11-07 2005-02-24 Craig Cantrell Active network defense system and method
US20040151382A1 (en) * 2003-02-04 2004-08-05 Tippingpoint Technologies, Inc. Method and apparatus for data packet pattern matching

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
HAIDONG XIA ET AL: "Detecting and blocking unauthorized access in Wi-Fi networks", LECTURE NOTES IN COMPUTER SCIENCE, SPRINGER VERLAG, NEW YORK, NY, US, May 2004 (2004-05-01), pages 795 - 806, XP002306583, ISSN: 0302-9743 *
WRIGHT J: "Detecting wireless LAN MAC address spoofing", ACADEMIC PAPER, 21 January 2003 (2003-01-21), XP002330231 *

Also Published As

Publication number Publication date
WO2007010101A2 (fr) 2007-01-25
FR2888695A1 (fr) 2007-01-19
EP1902563A2 (fr) 2008-03-26
US20090138971A1 (en) 2009-05-28

Similar Documents

Publication Publication Date Title
WO2007010101A3 (fr) Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication
WO2004088477A3 (fr) Appareil et procede de detection de vulnerabilite de reseau et de controle de conformite
GEP20094830B (en) System and method for call routing and paging across different types of networks
WO2007120313A3 (fr) Défense contre une attaque interne pour la validation de client réseau de trames de gestion de réseau
WO2008051258A3 (fr) Procédés et systèmes permettant de déterminer des mesures entropiques pour des réseaux
WO2007022364A3 (fr) Procede, dispositif et systeme permettant de surveiller des changements
DE60328254D1 (de) Verfahren zu automatischen Erkennung des virtuellen, lokalen Netzes
ITRM20020065A1 (it) Registratore di immagini e vocale, per un autoveicolo.
DE602005009999D1 (de) Kommunikationsnetz für Event-Logging-Systeme und -Methoden
EP1601137A4 (fr) Systeme reseau, noeud de pont d'apprentissage, procede d'apprentissage, et programme associe
NO20035245L (no) Grunnleggende Wi-Fi-arkitektur for 802.11-nettverk
WO2004015541A3 (fr) Reseau mobile adapte avec caracteristiques de detection d'intrusion et procedes associes
WO2008151321A3 (fr) Systèmes, procédés, et supports pour la mise en œuvre d'une règle de sécurité dans un réseau comportant une pluralité de composants
WO2005079312A3 (fr) Systeme automatise et procede de determination et de rapport d'opportunites de developpement d'un commerce
WO2006073642A3 (fr) Validation de plateformes d'administration de reseau dans une infrastructure de reseau
WO2006062915A3 (fr) Systeme et procede de connectivite de communications vitales
WO2005084403A3 (fr) Technique de maintien de connexions reseau securisees
WO2006069244A3 (fr) Autoconfiguration de points oam ethernet
WO2006091820A3 (fr) Controleur d'appel pour conversation telephonique simultanee par internet (voip call through)
WO2005114609A3 (fr) Procede et appareil de declenchement d'alarmes de reseau
WO2004061582A3 (fr) Procede et systeme pour analyser une pluralite de pieces
AU2003283444A1 (en) Method, network nodes and system for selecting network nodes
WO2006095262A3 (fr) Systeme et procede pour la determination de la qualite de reseau pour des appels voip
FI20050493A0 (fi) Yhteyden laadun valvonta
WO2005081746A3 (fr) Procede d'optimisation de routes locales entre des noeuds mobiles

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application
WWE Wipo information: entry into national phase

Ref document number: 2006778701

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 11988558

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

WWW Wipo information: withdrawn in national office

Country of ref document: DE

WWP Wipo information: published in national office

Ref document number: 2006778701

Country of ref document: EP