Method and device for providing network security by causing collisions
OwnerBrant D. Thomseninventor
Life of this patent
Estimating the term…
Abstract
A method for providing security in a computing network. When a security node receives a packet broadcast in a segment of the network, it compares an address in the packet with a stored list of addresses to determine if the packet is associated with an untrusted device. The address may be a source or destination address in packet. If the security node determines that an unauthorized packet is being broadcast, it broadcasts a garbage packet while the unauthorized packet is being broadcast. This causes a collision and the nodes in the segment will ignore both packets. The security node may have stored thereon a list of authorized or unauthorized addresses (e.g., medium access control addresses), which it references whenever it detects a packet being broadcast.
Claims24
A method of providing security a network, said method comprising:
- a) detecting a first packet being broadcast in said network, said first packet having associated with it an address that identifies an untrusted device in said network;
- and
- b) in response to said detection, broadcasting a signal to cause said first packet to be corrupted, wherein said first packet is ignored by devices in said network.
A device for providing security in a network, said device comprising:
- memory to store a list of addresses;
- detection logic for detecting a first packet that is considered a security risk, said detection based on comparing said list of addresses with an address in said first packet;
- logic to transmit a second packet while said first packet is being broadcast, wherein said device is operable to cause a collision between said first packet and said second packet.
A method for providing security in a segment of a network, said method comprising:
- a) determining that a first packet broadcast in said segment is associated with an untrusted node;
- and
- b) broadcasting a second packet to cause a collision between said first packet and said second packet, wherein nodes in said network ignore said first packet.
Dependencies are inferred from the claim text.