WO2007010101A3 - Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication - Google Patents

Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication Download PDF

Info

Publication number
WO2007010101A3
WO2007010101A3 PCT/FR2006/001508 FR2006001508W WO2007010101A3 WO 2007010101 A3 WO2007010101 A3 WO 2007010101A3 FR 2006001508 W FR2006001508 W FR 2006001508W WO 2007010101 A3 WO2007010101 A3 WO 2007010101A3
Authority
WO
WIPO (PCT)
Prior art keywords
detecting
intrusion
data packets
fra
telecommunication network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/FR2006/001508
Other languages
English (en)
Other versions
WO2007010101A2 (fr
Inventor
Laurent Butti
Roland Duffau
Franck Veysset
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Orange SA
Original Assignee
France Telecom SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by France Telecom SA filed Critical France Telecom SA
Priority to US11/988,558 priority Critical patent/US20090138971A1/en
Priority to EP06778701A priority patent/EP1902563A2/fr
Publication of WO2007010101A2 publication Critical patent/WO2007010101A2/fr
Publication of WO2007010101A3 publication Critical patent/WO2007010101A3/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
    • H04W12/122—Counter-measures against attacks; Protection against rogue devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W24/00—Supervisory, monitoring or testing arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/26—Network addressing or numbering for mobility support
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W84/00—Network topologies
    • H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10—Small scale networks; Flat hierarchical networks
    • H04W84/12—WLAN [Wireless Local Area Networks]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W92/00—Interfaces specially adapted for wireless communication networks
    • H04W92/04—Interfaces between hierarchically different network devices
    • H04W92/10—Interfaces between hierarchically different network devices between terminal device and access point, i.e. wireless air interface

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

L'invention propose une détection d'intrusion de type 'Man-ln-The-Middle' entre une entité (CL) et un point d'accès (AP) d'un réseau notamment selon la norme IEEE-802.11. Elle propose à cet effet les étapes suivantes : a) lire les corps de trames (FRA-i,... ,FRA-i+3) transmises entre l'entité et le point d'accès, b) détecter des trames (FRA-i,FRA-i+2) transmises à des instants respectifs distincts, mais comportant pourtant des corps de trames (fb) identiques, c) et déclencher une alarme en cas de détection positive à l'étape b).
PCT/FR2006/001508 2005-07-13 2006-06-28 Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication Ceased WO2007010101A2 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US11/988,558 US20090138971A1 (en) 2005-07-13 2006-06-28 Detecting Intrusion by Rerouting of Data Packets in a Telecommunications Network
EP06778701A EP1902563A2 (fr) 2005-07-13 2006-06-28 Detection d une intrusion par detournement de paquets de donnees dans un reseau de telecommunication

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR0507532A FR2888695A1 (fr) 2005-07-13 2005-07-13 Detection d'une intrusion par detournement de paquets de donnees dans un reseau de telecommunication
FR0507532 2005-07-13

Publications (2)

Publication Number Publication Date
WO2007010101A2 WO2007010101A2 (fr) 2007-01-25
WO2007010101A3 true WO2007010101A3 (fr) 2007-03-29

Family

ID=36297263

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FR2006/001508 Ceased WO2007010101A2 (fr) 2005-07-13 2006-06-28 Detection d’une intrusion par detournement de paquets de donnees dans un reseau de telecommunication

Country Status (4)

Country Link
US (1) US20090138971A1 (fr)
EP (1) EP1902563A2 (fr)
FR (1) FR2888695A1 (fr)
WO (1) WO2007010101A2 (fr)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120030759A1 (en) * 2010-07-28 2012-02-02 Alcatel-Lucent Usa Inc. Security protocol for detection of fraudulent activity executed via malware-infected computer system
CN104012162B (zh) * 2011-10-31 2018-03-27 诺基亚技术有限公司 通信网络中的位置隐私的方法及装置
US10620241B2 (en) 2012-02-17 2020-04-14 Perspecta Labs Inc. Method and system for packet acquisition, analysis and intrusion detection in field area networks
US9110101B2 (en) 2012-02-17 2015-08-18 Vencore Labs, Inc. Method and system for packet acquisition, analysis and intrusion detection in field area networks
EP2948882A4 (fr) 2013-01-24 2016-08-10 Vencore Labs Inc Procédé et système de visualisation et d'analyse d'un réseau de jonction de zone
CN106790299B (zh) * 2017-03-20 2020-06-23 京信通信系统（中国）有限公司 一种在无线接入点ap上应用的无线攻击防御方法和装置
US10853457B2 (en) * 2018-02-06 2020-12-01 Didi Research America, Llc System and method for program security protection

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2003065186A1 (fr) * 2002-01-31 2003-08-07 3Com Corporation Systeme de surveillance de reseau
US20040151382A1 (en) * 2003-02-04 2004-08-05 Tippingpoint Technologies, Inc. Method and apparatus for data packet pattern matching
US20050044422A1 (en) * 2002-11-07 2005-02-24 Craig Cantrell Active network defense system and method

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020166063A1 (en) * 2001-03-01 2002-11-07 Cyber Operations, Llc System and method for anti-network terrorism

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2003065186A1 (fr) * 2002-01-31 2003-08-07 3Com Corporation Systeme de surveillance de reseau
US20050044422A1 (en) * 2002-11-07 2005-02-24 Craig Cantrell Active network defense system and method
US20040151382A1 (en) * 2003-02-04 2004-08-05 Tippingpoint Technologies, Inc. Method and apparatus for data packet pattern matching

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
HAIDONG XIA ET AL: "Detecting and blocking unauthorized access in Wi-Fi networks", LECTURE NOTES IN COMPUTER SCIENCE, SPRINGER VERLAG, NEW YORK, NY, US, May 2004 (2004-05-01), pages 795 - 806, XP002306583, ISSN: 0302-9743 *
WRIGHT J: "Detecting wireless LAN MAC address spoofing", ACADEMIC PAPER, 21 January 2003 (2003-01-21), XP002330231 *

Also Published As

Publication number Publication date
US20090138971A1 (en) 2009-05-28
WO2007010101A2 (fr) 2007-01-25
EP1902563A2 (fr) 2008-03-26
FR2888695A1 (fr) 2007-01-19

Similar Documents

Publication Publication Date Title
WO2004088477A3 (fr) Appareil et procede de detection de vulnerabilite de reseau et de controle de conformite
WO2006091944A3 (fr) Ameliorations basees sur l'emplacement de detection d'une intrusion sans fil
EP1820300A4 (fr) Protection de reacheminement rapide a la peripherie d'un reseau rfc 2547
AU2003225531A1 (en) Integrated network intrusion detection
TW200503472A (en) Wireless network
NO20070349L (no) System og fremgangsmate for anropsruting og oppkalling av forskjellige nettverkstyper
WO2008048200A3 (fr) Contrôleur de réseau de technologie uma sur un réseau local doté d'une connexion de serveur mandataire
DE60328254D1 (de) Verfahren zu automatischen Erkennung des virtuellen, lokalen Netzes
WO2007022364A3 (fr) Procede, dispositif et systeme permettant de surveiller des changements
ITRM20020065A1 (it) Registratore di immagini e vocale, per un autoveicolo.
ATE409997T1 (de) Kommunikationsnetz für event-logging-systeme und -methoden
WO2001086877A3 (fr) Dispositif de surveillance d'utilisation de reseau et procede associe
NO20035245L (no) Grunnleggende Wi-Fi-arkitektur for 802.11-nettverk
WO2004015541A3 (fr) Reseau mobile adapte avec caracteristiques de detection d'intrusion et procedes associes
WO2008151321A3 (fr) Systèmes, procédés, et supports pour la mise en œuvre d'une règle de sécurité dans un réseau comportant une pluralité de composants
WO2006073642A3 (fr) Validation de plateformes d'administration de reseau dans une infrastructure de reseau
WO2006062915A3 (fr) Systeme et procede de connectivite de communications vitales
EP1812867A4 (fr) Systeme et procede pour la detection et l'attenuation de surcharge de donnees de protocole de voix sur ip
ITTO20020474A1 (it) ,,sistema e metodo per visualizzare informazioni sullo stato di un sistema di elaborazione,,.
WO2008096078A3 (fr) Dispositif electronique portable et procede de securisation d'un tel dispositif
WO2005114609A3 (fr) Procede et appareil de declenchement d'alarmes de reseau
WO2006091820A3 (fr) Controleur d'appel pour conversation telephonique simultanee par internet (voip call through)
WO2002030046A8 (fr) Procede et systeme destines a analyser un paquet ou une trame de donnees
WO2004028107A3 (fr) Controle de transmissions de donnees
WO2005011195A3 (fr) Securite de reseaux sans fil

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application
WWE Wipo information: entry into national phase

Ref document number: 2006778701

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 11988558

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

WWW Wipo information: withdrawn in national office

Country of ref document: DE

WWP Wipo information: published in national office

Ref document number: 2006778701

Country of ref document: EP