You are here: silicon.com > Resources > White Papers > Networking and Communications > Network Technologies > TCP - IP

TCP - IP White Papers

Matching TCP Packets and Its Application to the Detection of Long Connection Chains on the Internet

Tags:
tcp - ip

Overview Network attackers usually use long connection chains to hide their identity. One way to stop such attacks is to prevent the attackers from using computers as "steppingstones" for their attacks. Due to many network protocol issues, it is not possible to match all such pairs correctly. An algorithm to match a "Send" packet with its corresponding "Echo" packet is presented in this paper. The Roundtrip Times of these matched packets can be used to determine the number of intermediate hosts. The algorithm give a way to stop such connections in real-time.

Further White Paper Details
Publisher	University of Houston	File Format	PDF
Date Published	December 2004
Format	White Papers
Topics	TCP - IP

Did you find this white paper useful?

Anthony & Sylvan Pools Takes the Plunge with VoIP

Publisher:
Shoretel

Sprint IPVoice Connect Fact Sheet

Publisher:
Sprint

Integrated Trade Systems, Inc. Is Able to Track and Ensure Timely Purchase Order Delivery by Using Biscom Delivery Server to Send Files Securely

Publisher:
Biscom

Stewart Title Guaranty Company Reduces Courier and FTP Costs Using Biscom Delivery Server for Timely, Accurate, and Trackable Distribution of Software to Their Customers

Publisher:
Biscom

Tags:
tcp - ip

Slapper worm stops slapping

Known as Linux.Slapper.Worm, Slapper and Apache/mod_ssl, the worm's spread has fallen far short of the biggest attackers in recent times. The worm started spreading a week ago, and now appears to have reached a plateau after infecting about 7,000...

Channel:
Security Strategy

Zombies are after your ID

Our research shows that some attackers are highly skilled and organised, potentially belonging to some well-organised crime structures," Holz, a member of the Honeynet Project, wrote in the paper. At least a million computers worldwide are...

Channel:
Security Strategy

Cracked: The Great Firewall of China

If an attacker generated 100 triggering packets per second, and each packet caused 20 minutes of disruption, 120,000 pairs of endpoints could be prevented from communicating at any one time. Richard Clayton of the University of Cambridge computer...

Storm botnet 'services' for hire?

A honeypot is an system, often undefended, set up as a trap for attackers. Only a small fraction of infected hosts spread the worm. By only allowing a small number of hosts to propagate the virus and act as command-and-control servers, Storm is...

Channel:
Malware
Tags:
spammer,
botnet,
storm worm

Web 2.0 threat looms

Because it can allow attackers to run code in the user's browser, the possibilities are limitless - attackers can hijack a web session, deface websites or introduce malware. This could be executable JavaScript and infect the computer running the...

Gambling site brought to its knees by 'unstoppable' botnet

Attackers disguised the build up of traffic from up to 30,000 PC and Apple Mac botnet computers during the attack by analysing and reproducing the browsing habits of the sites' typical users. Peter Bassill, information security officer with Gala...

Virtualisation: Architectual Considerations and other Evaluation Criteria

In the past several years, server virtualisation technology has moved quickly and firmly into the IT mainstream. Of the many approaches to system virtualisation available in the market today, VMware's hypervisor architecture has gained the greatest market acceptance. This paper examines the architectural issues, solution support, and enterprise readiness required when deploying such a virtualisation solution.

Publisher:
EMC

Getting Started with Master Data Management

Master data management forms part of an overall enterprise governance program that aims to establish trusted data throughout the enterprise. This white paper from Mike Ferguson of Intelligent Business Strategies defines master data, examines why it is needed, and explores methodologies for implementing master data management.

Publisher:
DataFlux

Optimising Storage with Global File Virtualisation

This white paper will provide an overview on how Rainfinity Global File Virtualisation virtualises unstructured data environments and moves data -including active, open files-without disruption to users or applications. Rainfinity is the only enterprise-class file virtualisation solution, and delivers complete NAS optimisation across geterogeneous environments, such as NAS, CAS, and file servers.

Publisher:
EMC

Also on silicon.com

Site Navigation:

TCP - IP White Papers

Matching TCP Packets and Its Application to the Detection of Long Connection Chains on the Internet

Quick Sitemap Links:

About Us

Search

Blogs

Verticals

Advertising Features

CNET Networks in Europe

CNET Networks in the United States

CNET Networks in Asia Pacific