Multiconfiguable device masking shunt and method of use
AssigneeRe Src Limited
InventorDouglas Alan Reamer
Life of this patent
Estimating the term…
Abstract
A multiconfigurable device masking shunt for a network device, preferably, on a secure network having a first mode and a second mode. In the first mode, the shunt cloaks the network device by rendering the network device invisible to upstream and downstream relay devices. During cloaking, the network device's media access control address is substituted with the upstream or downstream relay devices media access control address. In a second mode, the shunt passes inbound and outbound traffic through one of two alternate paths to the secure network from an unsecure network and can monitor such traffic.
Claims78
A device masking shunt for communication networks comprising:
- means for capturing and storing a source media access control (MAC) originating address of an inbound received frame;
- and
- means for substituting a device MAC originating address in each respective outbound frame of a network device with the stored source MAC originating address to conceal an identity of said network device.
A device masking shunt for communication networks comprising:
- means for capturing and storing a first media access control (MAC) originating address of an inbound network frame and a second MAC originating address of an outbound network frame;
- and
- means for substituting a device MAC originating address in each outbound frame of a network device with the stored first MAC originating address when the outbound frame is related to the inbound network frame and the stored second MAC originating address when the outbound frame is related to the outbound network frame to conceal an identity of said network device.
A multiconfigurable device masking shunt for a network device on a secure network comprising:
- means for cloaking said network device, said network device having a predetermined media access control address, and rendering said network device invisible, in a first mode, to upstream and downstream relay devices;
- and
- means for passing inbound and outbound traffic through one of two alternate paths to said secure network, in said second mode.
A defensive intrusion detection system for communication networks comprising:
- a primary device masking shunt functioning to cloak an identity of first network device;
- a secondary device masking shunt functioning to cloak an identity of a second network device;
- and
- a monitoring device masking shunt for invisibly monitoring traffic through said first network device and communicating invisibly said monitored traffic through said first network device wherein upon detection of degraded performance of said first network device, said monitoring device masking shunt switches paths to invisibly monitor traffic through said second network device and communicate invisibly said monitored traffic through said second network device.
A method for shunt masking a network device in a communication network comprising the steps of:
- capturing a source media access control (MAC) originating address of an inbound received frame;
- storing said source MAC originating address of said inbound received frame;
- substituting a device MAC originating address in each respective outbound frame of said network device with the stored source MAC originating address to mask and conceal an identity of said network device.
The method of shunt masking a network device of a communication network comprising the steps of:
- capturing a first media access control (MAC) originating address of an inbound network frame and a second MAC originating address of an outbound network frame;
- storing said first MAC originating address of said inbound network frame and said second MAC originating address of said outbound network frame;
- substituting a device MAC originating address in each outbound frame of a network device with the stored first MAC originating address when the outbound frame is related to the inbound network frame and the stored second MAC originating address when the outbound frame is related to the outbound network frame to conceal an identity of said network device.
A method of multiconfiguring device masking shunt operations for a network device on a secure network comprising:
- cloaking said network device, said network device having a predetermined media access control address, and rendering said network device invisible, in a first mode, to upstream and downstream relay devices;
- and
- passing inbound and outbound traffic through one of two alternate paths to said secure network, in said second mode.
A method of defensive intrusion detection for a communication network comprising the steps of:
- concealing an identity of first network device;
- concealing an identity of a second network device;
- invisibly monitoring traffic through said first network device and communicating invisibly said monitored traffic through said first network device;
- detecting degraded performance of said first network device;
- and
- in response to the detection of the degraded performance, switching communication paths to invisibly monitor traffic through said second network device and communicate invisibly said monitored traffic through said second network device.
A device masking shunt for communication networks comprising:
- a capture and store media access control (MAC) address module which captures and stores a source MAC originating address of an inbound received frame;
- and
- a MAC address substitution and frame re-assembler module which substitutes a device MAC originating address in each respective outbound frame of a network device with the stored source MAC originating address to conceal an identity of said network device.
A device masking shunt for communication networks comprising:
- first and second capture and store media access control (MAC) address modules which captures and stores a first media access control (MAC) originating address of an inbound network frame and a second MAC originating address of an outbound network frame;
- and
- a first MAC address substitution and frame re-assembler module which substitutes a device MAC originating address in each outbound frame of a network device with the stored first MAC originating address when the outbound frame is related to the inbound network frame;
- a second MAC address substitution and frame re-assembler module which substitutes a device MAC originating address in each outbound frame of the network device with the stored second MAC originating address when the outbound frame is related to the outbound network frame to conceal an identity of said network device.
Dependencies are inferred from the claim text.