ATE524009T1 - Verteidigung gegen mac-tabellen-overflow- angriffen - Google Patents

Verteidigung gegen mac-tabellen-overflow- angriffen

Info

Publication number
ATE524009T1
ATE524009T1 AT09703949T AT09703949T ATE524009T1 AT E524009 T1 ATE524009 T1 AT E524009T1 AT 09703949 T AT09703949 T AT 09703949T AT 09703949 T AT09703949 T AT 09703949T AT E524009 T1 ATE524009 T1 AT E524009T1
Authority
AT
Austria
Prior art keywords
mac
mac address
category
way traffic
mac table
Prior art date
Application number
AT09703949T
Other languages
English (en)
Inventor
Yong Sun
Vinod Kumar Choyi
Original Assignee
Alcatel Lucent
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alcatel Lucent filed Critical Alcatel Lucent
Application granted granted Critical
Publication of ATE524009T1 publication Critical patent/ATE524009T1/de

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4604—LAN interconnection over a backbone network, e.g. Internet, Frame Relay
    • H04L12/462—LAN interconnection over a bridge based backbone
    • H04L12/4625—Single bridge functionality, e.g. connection of two networks over a single bridge
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/25—Routing or path finding in a switch fabric
    • H04L49/251—Cut-through or wormhole routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/35—Switches specially adapted for specific applications
    • H04L49/351—Switches specially adapted for specific applications for local area network [LAN], e.g. Ethernet switches
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/145—Detection or countermeasures against cache poisoning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1458—Denial of Service

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)
AT09703949T 2008-01-11 2009-01-08 Verteidigung gegen mac-tabellen-overflow- angriffen ATE524009T1 (de)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US12/008,535 US8180874B2 (en) 2008-01-11 2008-01-11 Facilitating defense against MAC table overflow attacks
PCT/IB2009/051972 WO2009093224A2 (en) 2008-01-11 2009-01-08 Facilitating defense against mac table overflow attacks

Publications (1)

Publication Number Publication Date
ATE524009T1 true ATE524009T1 (de) 2011-09-15

Family

ID=40851635

Family Applications (1)

Application Number Title Priority Date Filing Date
AT09703949T ATE524009T1 (de) 2008-01-11 2009-01-08 Verteidigung gegen mac-tabellen-overflow- angriffen

Country Status (7)

Country Link
US (1) US8180874B2 (de)
EP (1) EP2260628B1 (de)
JP (1) JP5111618B2 (de)
KR (1) KR101171545B1 (de)
CN (1) CN101911648B (de)
AT (1) ATE524009T1 (de)
WO (1) WO2009093224A2 (de)

Families Citing this family (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP5622353B2 (ja) 2007-05-07 2014-11-12 本荘ケミカル株式会社 気相中の一酸化炭素を二酸化炭素に光酸化する方法
EP2009862B1 (de) * 2007-06-29 2012-11-14 Nokia Siemens Networks Oy Verfahren zum Schutz eines Netzwerks durch Portblockierung
US8379522B2 (en) * 2010-01-15 2013-02-19 Alcatel Lucent Link aggregation flood control
US11082665B2 (en) 2010-11-05 2021-08-03 Razberi Secure Technologies, Llc System and method for a security system
US10477158B2 (en) * 2010-11-05 2019-11-12 Razberi Technologies, Inc. System and method for a security system
CN102404148A (zh) * 2011-11-22 2012-04-04 华为技术有限公司 一种mac地址表管理方法及装置
CN103095717B (zh) * 2013-01-28 2015-11-25 杭州华三通信技术有限公司 防止mac地址表溢出攻击的方法及网络设备
US10419267B2 (en) 2014-01-22 2019-09-17 Lenovo Enterprise Solutions (Singapore) Pte. Ltd. Network control software notification with advance learning
US20150207664A1 (en) * 2014-01-22 2015-07-23 International Business Machines Corporation Network control software notification with denial of service protection
US9912615B2 (en) * 2015-02-05 2018-03-06 Verizon Patent And Licensing Inc. Dynamic removal of MAC table entries based on a MAC table fullness level
CN106603736B (zh) * 2015-10-20 2020-05-19 中兴通讯股份有限公司 Mac地址处理方法及装置
US10313153B2 (en) * 2017-02-27 2019-06-04 Cisco Technology, Inc. Adaptive MAC grouping and timeout in EVPN environments using machine learning
GB2574468B (en) * 2018-06-08 2020-08-26 F Secure Corp Detecting a remote exploitation attack
US11044253B2 (en) * 2018-10-31 2021-06-22 Bank Of America Corporation MAC authentication bypass endpoint database access control
US10764315B1 (en) * 2019-05-08 2020-09-01 Capital One Services, Llc Virtual private cloud flow log event fingerprinting and aggregation
FI128961B (en) * 2020-02-19 2021-04-15 Telia Co Ab Management of network addresses
US11336647B2 (en) * 2020-09-30 2022-05-17 Juniper Networks, Inc. Error handling for media access control security
US11445439B1 (en) * 2021-03-01 2022-09-13 Charter Communications Operating, Llc Managing power over ethernet through a switch
JP7724984B2 (ja) * 2022-11-25 2025-08-18 三菱電機株式会社 通信装置

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US2007230A (en) * 1933-08-08 1935-07-09 Wade John Ross Boiler
US7274665B2 (en) 2002-09-30 2007-09-25 Intel Corporation Packet storm control
US7668948B2 (en) * 2002-12-31 2010-02-23 Intel Corporation Staggered time zones
US20050141537A1 (en) * 2003-12-29 2005-06-30 Intel Corporation A Delaware Corporation Auto-learning of MAC addresses and lexicographic lookup of hardware database
CN1822565A (zh) * 2004-10-15 2006-08-23 阿尔卡特公司 具有mac表溢出保护的网络
US7508757B2 (en) * 2004-10-15 2009-03-24 Alcatel Lucent Network with MAC table overflow protection
JP4481147B2 (ja) * 2004-10-28 2010-06-16 富士通株式会社 Ｍａｃアドレス学習装置
JP2007067515A (ja) * 2005-08-29 2007-03-15 Nec Corp Ｌａｎスイッチ及びｍａｃアドレス学習方法並びにプログラム
JP2007266850A (ja) * 2006-03-28 2007-10-11 Fujitsu Ltd 伝送装置
CN100438439C (zh) * 2006-05-19 2008-11-26 华为技术有限公司 一种防止mac地址欺骗的方法

Also Published As

Publication number Publication date
WO2009093224A2 (en) 2009-07-30
EP2260628A2 (de) 2010-12-15
KR20100095626A (ko) 2010-08-31
US8180874B2 (en) 2012-05-15
CN101911648A (zh) 2010-12-08
JP5111618B2 (ja) 2013-01-09
KR101171545B1 (ko) 2012-08-06
JP2011509619A (ja) 2011-03-24
US20090182854A1 (en) 2009-07-16
WO2009093224A3 (en) 2009-12-17
EP2260628B1 (de) 2011-09-07
CN101911648B (zh) 2013-10-16

Similar Documents

Publication Publication Date Title
ATE524009T1 (de) Verteidigung gegen mac-tabellen-overflow- angriffen
WO2014132136A3 (en) Efficient longest prefix matching techniques for network devices
WO2016042505A3 (en) Automated determination of tree attributes and assignment of receiver identifiers by distributed election in multicast architectures relying on packets identifying intended receivers
JP2014534739A5 (de)
WO2008087561A3 (en) Methods and compositions for modulating the sirna and rna-directed-dna methylation pathways
BR112017014230A2 (pt) endófitos de semente através de cultivares e espécies, composições associadas e métodos de uso dos mesmos
DE602005002902D1 (de) Zufallzugriffsverfahren in mehrzelligen OFDMA Netzwerke
ATE518328T1 (de) Mechanismus zur ansteuerung einer absenkvorrichtung
EP4429189A3 (de) Mesh-netzwerkadressierungserregende eine-mesh-netzwerks
PL3253170T3 (pl) Sposób i aparaty do dostępu losowego w ortogonalnym systemie komunikacji wielokrotnego dostępu
WO2010045000A3 (en) Hot memory block table in a solid state storage device
EA200702652A1 (ru) Полимерная композиция пропилена
BR112013015104A2 (pt) arranjo de peneira de poço
TW200612480A (en) Bare aluminum baffles for resist stripping chambers
WO2004077205A3 (en) A method of reducing denial-of-service attacks and a system as well as an access router therefor
EA201290892A1 (ru) Твердые композиции
MX2009008617A (es) Uso de antagonistas de interleucina-23 para el tratamiento de infeccion.
WO2012060955A3 (en) Application lifetime management
WO2011005360A3 (en) Systems and methods to provide assistance during address input
WO2015102874A3 (en) Method of delaying checkpoints by inspecting network packets
AR087500A1 (es) Almacenamiento y asignacion de configuraciones de temporizacion de control en una red multiple de comunicaciones celulares
NO20076079L (no) Polymersammensetning med forbedrete vataldringsegenskaper
EP3709182A3 (de) Konfiguration der kommunikation zwischen rechenknoten
WO2014147483A3 (en) Cut-through processing for slow and fast ports
UA117334C2 (uk) Технологічні добавки і їх застосування в ротаційному формуванні

Legal Events

Date Code Title Description
RER Ceased as to paragraph 5 lit. 3 law introducing patent treaties