Apparatus and Method for Secure Updating of a Vulnerable System over a Network
AssigneeInternational Business Machines Corporation
InventorsDa Ming Hao, Wei Li, Lin Luo, Hang Jun Ye
Life of this patent
Estimating the term…
Abstract
An apparatus interposed between a vulnerable system and a network for secure updating of the system includes an internal interface connected to the system; an external interface connected to the network; and one or more filter modules for filtering out specific incoming network packets to block possible network attacks. The filtering may comprise filtering out all incoming TCP SYN packets; filtering out all incoming TCP SYN packets and UDP packets; and/or only allowing packets pertinent to any outgoing connection initiated by the system.
Claims23
An apparatus for secure updating of a vulnerable system over a network, the apparatus interposed between the system and the network, and implemented as a special hardware, the apparatus comprising:
- an internal interface connected to the system;
- an external interface connected to the network;
- and
- at least one filter module for filtering out specific incoming network packets to block possible network attacks.
A method for secure updating of a vulnerable system over a network, comprising the steps of:
- providing an apparatus between the system and the network comprising:
- an internal interface connected to the system;
- an external interface connected to the network;
- and
- at least one filter module for filtering out specific incoming network packets to block possible network attacks;
- and
- performing secure updating of the system over the network through the apparatus.
A method for secure updating of a vulnerable system over a network, comprising the steps of:
- the vulnerable system sending an update request to an update server over the network to perform update;
- and
- filtering out special incoming network packets to block any possible network attack.
Dependencies are inferred from the claim text.