发明名称 DETECTING PROXY-BASED COMMUNICATIONS
摘要 Evaluating communications via a computer network for the presence of proxy-based communications, by sending to a computer via a computer network multiple data packets followed by an out-of-sequence data packet that is out-of-sequence relative to any of the multiple data packets, receipt of the out-of-sequence data packet configured to cause the computer to send an acknowledgement via the computer network, and to cause the requestor to send a second data request via the computer and the computer network, detecting receipt of the acknowledgement at a first time, detecting receipt of the second data request at a second time, calculating a time delay between the first time and the second time, performing the sending, detecting and calculating steps multiple times for calculating multiple time delays, and determining whether the requestor is communicating via a proxy by evaluating the multiple time delays with respect to a predefined proxy evaluation criterion.
申请公布号 US2017034029(A1) 申请公布日期 2017.02.02
申请号 US201514948427 申请日期 2015.11.23
申请人 INTERNATIONAL BUSINESS MACHINES CORPORATION 发明人 GILAD YOSSI;KOHANIM SHAHAR
分类号 H04L12/26;H04L29/08 主分类号 H04L12/26
代理机构 代理人
主权项 1. A computer-implemented method for evaluating communications via a computer network for the presence of proxy-based communications, the method comprising: sending to a computer via a computer network, a response to a first data request received from a requestor via the computer and the computer network, wherein the response includes a plurality of data packets followed by an out-of-sequence data packet that is out-of-sequence relative to any of the plurality of data packets, wherein the out-of-sequence data packet is configured to cause the computer, responsive to receipt of the out-of-sequence data packet by the computer after receipt of the plurality of data packets by the computer, to send an acknowledgement via the computer network, andwherein the out-of-sequence data packet is configured to cause the requestor, responsive to receipt of the out-of-sequence data packet by the requestor, and after receipt of the plurality of data packets by the requestor, to send a second data request via the computer and the computer network; detecting receipt of the acknowledgement at a first time; detecting receipt of the second data request at a second time; calculating a time delay between the first time and the second time; performing the sending, detecting and calculating steps a plurality of times, thereby calculating a plurality of time delays; and determining whether the requestor is communicating via a proxy by evaluating the plurality of time delays with respect to a predefined proxy evaluation criterion.
地址 Armonk NY US