首页> 外国专利> Attack packet countermeasure system, attack packet countermeasure, attack packet countermeasure device, and attack packet measures program

Attack packet countermeasure system, attack packet countermeasure, attack packet countermeasure device, and attack packet measures program

机译:攻击报文对策系统,攻击报文对策,攻击报文对策装置以及攻击报文对策程序

摘要

PROBLEM TO BE SOLVED: To control communication from an attack source by a repeater closest to the attack source by uniquely specifying the attack source, even when a server is attacked via the repeater which rewrites the transmitted source information of a packet.;SOLUTION: The system is provided with a communication log storage means, having a plurality of repeaters which rewrite the transmitting source information of the received packet, and a management terminal which transmits a retrieval request to the repeater and stores a communication log that includes a transmitting source address before repeating, a transmitting source address, after repeating by the repeaters, and a destination address; an unauthorized terminal retrieval means for specifying an unauthorized terminal or a repeater at a transmitting origin of the retrieval request, by referring to the communication log storage means, when the retrieval request is input; and a function control means for inputting the retrieval request from the management terminal or other repeaters, outputting the retrieval request to the unauthorized terminal retrieval means, transmitting retrieval results to the management terminal or to other repeaters, when the unauthorized terminal is specified by the unauthorized terminal retrieval means, and transmitting the retrieval request to the repeater at the transmitting destination, when the repeater at the transmitting destination is specified by the unauthorized terminal retrieval means.;COPYRIGHT: (C)2009,JPO&INPIT
机译:解决的问题:即使服务器通过重写数据包传输源信息的转发器攻击,也可以通过唯一指定攻击源来控制最靠近攻击源的转发器与攻击源的通信。该系统具有通信日志存储装置,该通信日志存储装置具有:多个转发器,用于重写接收到的分组的发送源信息;以及管理终端,该管理终端向该转发器发送检索请求,并在通信终端中存储包括发送源地址的通信日志。重复,由转发器重复后的发送源地址和目的地址;当输入检索请求时,通过参考通信日志存储装置,用于在检索请求的发送源处指定未授权终端或中继器的未授权终端检索装置;功能控制装置,其用于从管理终端或其他中继器输入检索请求,将检索请求输出至未授权终端检索装置,当未授权终端指定了未授权终端时,将检索结果发送至管理终端或其他中继器。终端检索装置,当未经授权的终端检索装置指定了发送目的地的转发器时,将检索请求发送到发送目的地的转发器。版权所有:(C)2009,JPO&INPIT

著录项

  • 公开/公告号JP4710889B2

    专利类型

  • 公开/公告日2011-06-29

    原文格式PDF

  • 申请/专利权人 日本電気株式会社;

    申请/专利号JP20070218802

  • 发明设计人 木津 由也;

    申请日2007-08-24

  • 分类号H04L12/66;H04L12/46;

  • 国家 JP

  • 入库时间 2022-08-21 18:18:27

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号