- 专利标题： Methods, systems and computer program products for detecting a spoofed source address in IP datagrams
-
申请号： US09930351申请日： 2001-08-15
-
公开(公告)号： US07134012B2公开(公告)日： 2006-11-07
- 发明人: Ronald P. Doyle , John R. Hind , Thomas Narten , Marcia L. Peters
- 申请人： Ronald P. Doyle , John R. Hind , Thomas Narten , Marcia L. Peters
- 申请人地址： US NY Armonk
- 专利权人： International Business Machines Corporation
- 当前专利权人： International Business Machines Corporation
- 当前专利权人地址： US NY Armonk
- 代理机构： Myers Bigel Sibley & Sajovec, P.A.
- 主分类号： H04L9/00
- IPC分类号： H04L9/00 ; H04L12/56
摘要：
Methods, systems and computer program products are provided for determining if a packet has a spoofed source Internet Protocol (IP) address. A source media access control (MAC) address of the packet and the source IP address are evaluated to determine if the source IP address of the packet has been bound to the source MAC address at a source device of the packet. The packet is determined to have a spoofed source IP address if the evaluation indicates that the source IP address is not bound to the source MAC address. Such an evaluation may be made for packets having a subnet of the source IP address which matches a subnet from which the packet originated.
公开/授权文献
信息查询
