Flow-Based Anti-Replay Checking

摘要

This disclosure describes an approach to detect replay attacks while having multiple cores in a multi-core processor manage an established tunneling session. The tunneling session includes a number of flows. One of the cores is assigned to manage one of the flows, and another core is assigned to manage another of the flows. A replay attack over the tunneling session is inhibited by maintaining a flow-based sequence context at each of the flows, and the flow-based sequence context is maintained by the core that is managing the respective flow.

主权项

1. A method of managing a tunneling protocol using a multi-core processor, the method comprising:
establishing a tunneling session at a multi-core processor, wherein the multi-core processor has a plurality of processing cores, and wherein a plurality of flows are transmitted over the established tunneling session; assigning a first of the plurality of cores to manage a first flow from the plurality of flows and assigning a second of the plurality of cores to manage a second flow from the plurality of flows; and maintaining a flow-based sequence context at each of the plurality of flows, wherein the flow-based sequence context is maintained by the core that is managing the respective flow.