Back to results
US 12,744,762 B2Granted
Protocol obfuscation in moving target defense
AssigneeComcast Cable Communications, LLC
InventorChristopher Zarcone
Life of this patent
Estimating the term…
Abstract
Methods and systems for implementing a moving target defense are described. The moving target defense can comprise obfuscating a protocol identifier within a packet. The protocol identifier can be replaced with a faux protocol identifier. Additionally, diversion headers can be inserted into to the packet, thereby creating additional layers of complexity.
Claims40
A method comprising:
- receiving, by a device, a packet comprising one or more headers;
- determining, based on the one or more headers, protocol identifier information;
- generating, based on the protocol identifier information, one or more permutations of one or more protocol identifiers for the one or more headers;
- determining a mapping of the one or more permutations of the one or more protocol identifiers;
- determining, based on the mapping of the one or more permutations of the one or more protocol identifiers, a protocol identifier associated with the packet;
- and
- processing, based on the determining of the protocol identifier, the packet.
4 more elements
An apparatus comprising:
- one or more processors;
- and
- a memory storing processor-executable instructions that, when executed by the one or more processors, cause the apparatus to:
- receive a packet comprising one or more headers;
- determine, based on the one or more headers, protocol identifier information;
- generate, based on the protocol identifier information, one or more permutations of one or more protocol identifiers for the one or more headers;
- determine a mapping of the one or more permutations of the one or more protocol identifiers;
- determine, based on the mapping of the one or more permutations of the one or more protocol identifiers, a protocol identifier associated with the packet;
- and
- process, based on the determining of the protocol identifier, the packet.
7 more elements
One or more non-transitory computer-readable media storing processor-executable instructions that, when executed by at least one processor, cause the at least one processor to:
- receive, by a device, a packet comprising one or more headers;
- determine, based on the one or more headers, protocol identifier information;
- generating, based on the protocol identifier information, one or more permutations of one or more protocol identifiers for the one or more headers;
- determine a mapping of the one or more permutations of the one or more protocol identifiers;
- determine, based on the mapping of the one or more permutations of the one or more protocol identifiers, a protocol identifier associated with the packet;
- and
- process, based on the determining of the protocol identifier, the packet.
4 more elements
A system comprising:
- a first computing device configured to send a packet comprising one or more headers;
- a second computing device configured to:
- receive the packet;
- determine, based on the one or more headers, protocol identifier information;
- generating, based on the protocol identifier information, one or more permutations of one or more protocol identifiers for the one or more headers;
- determine a mapping of the one or more permutations of the one or more protocol identifiers;
- determine, based on the mapping of the one or more permutations of the one or more protocol identifiers, a protocol identifier associated with the packet;
- and
- process, based on the determining of the protocol identifier, the packet.
6 more elements
Dependencies are inferred from the claim text.