发明名称 Detectable of intrusions containing overlapping reachabilities
摘要 In an ATM network operating in accordance with PNNI standards, the operation of a switch is divided into two phases, a learning mode phase and an active mode phase. During learning mode phase, each time a reachability is received from a sending switch, the reachability is recorded in the database of the receiving switch and the received reachability is sent to other switches in the same peer group. At the end of the learning mode phase, the database of each of the switches contains the reachabilities advertised by all the switches of the peer group during the learning mode group phase. On a termination of the learning mode, the switches enter the active mode phase. During the active mode, each time a reachability is received from a sending switch, the receiving switch checks to see if the reachability has been advertised in the past by that sending switch. If it has, the reachability is considered to be valid and the receiving switch waits for the next reachability. On the other hand, if the particular reachability has never been announced before the sending node, it is compared to the reachability in the database for all other nodes of the peer group. If the reachability causes the reachability from other node to be overlapped and the overlapping is suspicious, then an alarm is raised.
申请公布号 US6487204(B1) 申请公布日期 2002.11.26
申请号 US19990310273 申请日期 1999.05.12
申请人 INTERNATIONAL BUSINESS MACHINES CORPORATION 发明人 DACIER MARC;SCOTTON PAOLO
分类号 H04L12/56;H04L29/06;H04Q11/04;(IPC1-7):H04L12/56 主分类号 H04L12/56
代理机构 代理人
主权项
地址