PROCÉDÉS, SYSTÈMES ET SUPPORTS LISIBLES PAR ORDINATEUR PERMETTANT DE DÉTECTER DES INTRUSIONS DE LIAISON PHYSIQUE

摘要

The subject matter described herein relates to method, systems, and computer readable media for detecting physical link intrusions. A method for detecting physical link intrusions includes monitoring a link delay signature associated with a physical link based on one-way link delay measurements obtained using at least one network tap. The method also includes determining whether a change in the link delay signature has met or exceeded a threshold value. The method further includes in response to determining that the change in the link delay signature has met or exceeded the threshold value, determining that a physical link intrusion has occurred.