[go: up one dir, main page]

WO2009008052A1 - 中継装置および中継方法 - Google Patents

中継装置および中継方法 Download PDF

Info

Publication number
WO2009008052A1
WO2009008052A1 PCT/JP2007/063672 JP2007063672W WO2009008052A1 WO 2009008052 A1 WO2009008052 A1 WO 2009008052A1 JP 2007063672 W JP2007063672 W JP 2007063672W WO 2009008052 A1 WO2009008052 A1 WO 2009008052A1
Authority
WO
WIPO (PCT)
Prior art keywords
packet
transmission source
address
relay
destination
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/JP2007/063672
Other languages
English (en)
French (fr)
Inventor
Jun Ogawa
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Fujitsu Ltd
Original Assignee
Fujitsu Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Fujitsu Ltd filed Critical Fujitsu Ltd
Priority to JP2009522445A priority Critical patent/JP4677501B2/ja
Priority to PCT/JP2007/063672 priority patent/WO2009008052A1/ja
Publication of WO2009008052A1 publication Critical patent/WO2009008052A1/ja
Priority to US12/633,899 priority patent/US8276204B2/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0263—Rule management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0236—Filtering by address, protocol, port number or service, e.g. IP-address or URL

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Business, Economics & Management (AREA)
  • General Business, Economics & Management (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

　ネットワークシステムに含まれる各ルータ１００～５００は、攻撃パケットを検出した場合に、攻撃パケットに含まれる送信元ＩＰアドレスを宛先ＩＰアドレスに設定し、攻撃パケットに含まれる宛先ＩＰアドレスを送信元ＩＰアドレスに設定した送信元検査用パケット（要求用）を出力する。そして、送信元検査用パケット（回答用）を取得した場合に、送信元検査用パケット（回答用）に含まれる送信元ＩＰアドレスと宛先ＩＰアドレスと当該応答パケットを受信したインタフェースの識別情報とを対応付けてフィルタテーブルに登録し、フィルタテーブルに基づいて転送対象となるパケットを転送するか否かを判定する。
PCT/JP2007/063672 2007-07-09 2007-07-09 中継装置および中継方法 Ceased WO2009008052A1 (ja)

Priority Applications (3)

Application Number Priority Date Filing Date Title
JP2009522445A JP4677501B2 (ja) 2007-07-09 2007-07-09 中継装置および中継方法
PCT/JP2007/063672 WO2009008052A1 (ja) 2007-07-09 2007-07-09 中継装置および中継方法
US12/633,899 US8276204B2 (en) 2007-07-09 2009-12-09 Relay device and relay method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2007/063672 WO2009008052A1 (ja) 2007-07-09 2007-07-09 中継装置および中継方法

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US12/633,899 Continuation US8276204B2 (en) 2007-07-09 2009-12-09 Relay device and relay method

Publications (1)

Publication Number Publication Date
WO2009008052A1 true WO2009008052A1 (ja) 2009-01-15

Family

ID=40228249

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2007/063672 Ceased WO2009008052A1 (ja) 2007-07-09 2007-07-09 中継装置および中継方法

Country Status (3)

Country Link
US (1) US8276204B2 (ja)
JP (1) JP4677501B2 (ja)
WO (1) WO2009008052A1 (ja)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2010219750A (ja) * 2009-03-16 2010-09-30 Ricoh Co Ltd 情報処理装置、情報処理方法、及びプログラム

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8634084B2 (en) * 2010-03-29 2014-01-21 Kabushiki Kaisha Toshiba Data processing system and image forming apparatus
JP2018082310A (ja) * 2016-11-16 2018-05-24 富士通株式会社 ＰａａＳ接続プログラム、ＰａａＳ接続方法及びＰａａＳ接続装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2000312225A (ja) * 1998-10-05 2000-11-07 Hitachi Ltd パケット中継装置
JP2002158699A (ja) * 2000-11-20 2002-05-31 Nippon Telegr & Teleph Corp <Ntt> ＤｏＳ攻撃防止方法および装置およびシステムおよび記録媒体
JP2002176454A (ja) * 2000-12-05 2002-06-21 Nec Corp パケット転送制御装置、パケット転送制御方法およびパケット転送制御システム
JP2005130190A (ja) * 2003-10-23 2005-05-19 Nippon Telegr & Teleph Corp <Ntt> 攻撃パケット防御システム
JP2007060456A (ja) * 2005-08-26 2007-03-08 Alaxala Networks Corp フィルタリングを備えるパケット転送装置

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR100333250B1 (ko) * 1998-10-05 2002-05-17 가나이 쓰토무 패킷 중계 장치
JP3996288B2 (ja) * 1998-12-07 2007-10-24 株式会社日立製作所 通信ネットワークシステムの管理方法および情報中継装置
US7013482B1 (en) * 2000-07-07 2006-03-14 802 Systems Llc Methods for packet filtering including packet invalidation if packet validity determination not timely made
US6772334B1 (en) * 2000-08-31 2004-08-03 Networks Associates, Inc. System and method for preventing a spoofed denial of service attack in a networked computing environment
US7536548B1 (en) * 2002-06-04 2009-05-19 Rockwell Automation Technologies, Inc. System and methodology providing multi-tier-security for network data exchange with industrial control components
US20040162992A1 (en) * 2003-02-19 2004-08-19 Sami Vikash Krishna Internet privacy protection device
KR100744530B1 (ko) * 2003-09-17 2007-08-01 한국전자통신연구원 연결 재설정 기법을 이용한 실시간 연결 역추적 장치 및그 방법
KR100834570B1 (ko) * 2006-06-23 2008-06-02 한국전자통신연구원 실시간 상태 기반 패킷 검사 방법 및 이를 위한 장치

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2000312225A (ja) * 1998-10-05 2000-11-07 Hitachi Ltd パケット中継装置
JP2002158699A (ja) * 2000-11-20 2002-05-31 Nippon Telegr & Teleph Corp <Ntt> ＤｏＳ攻撃防止方法および装置およびシステムおよび記録媒体
JP2002176454A (ja) * 2000-12-05 2002-06-21 Nec Corp パケット転送制御装置、パケット転送制御方法およびパケット転送制御システム
JP2005130190A (ja) * 2003-10-23 2005-05-19 Nippon Telegr & Teleph Corp <Ntt> 攻撃パケット防御システム
JP2007060456A (ja) * 2005-08-26 2007-03-08 Alaxala Networks Corp フィルタリングを備えるパケット転送装置

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2010219750A (ja) * 2009-03-16 2010-09-30 Ricoh Co Ltd 情報処理装置、情報処理方法、及びプログラム

Also Published As

Publication number Publication date
JP4677501B2 (ja) 2011-04-27
JPWO2009008052A1 (ja) 2010-09-02
US20100088764A1 (en) 2010-04-08
US8276204B2 (en) 2012-09-25

Similar Documents

Publication Publication Date Title
WO2008020430A3 (en) Voice over ip forwarding
WO2009135611A3 (en) Network device and method for local routing of data traffic
WO2007050244A3 (en) Method and system for detecting and responding to attacking networks
ATE523023T1 (de) Verfahren, kommunikationssystem und vorrichtung für arp paketverarbeitung
WO2010078076A3 (en) Systems, methods, and computer program products for adaptively adjusting a registration interval of an endpoint
JP2012533958A5 (ja)
ATE488945T1 (de) Verfahren und vorrichtung zum detektieren eines portscans mit gefälschter quelladdresse
WO2008152807A1 (ja) Ｍａｃアドレスの重複解消方法、ネットワーク機器管理システム、サーバーおよび情報機器
WO2009005925A3 (en) Automated collection of forensic evidence associated with a network security incident
WO2008045302A3 (en) Device, system and method for use of micro-policies in intrusion detection/prevention
WO2009116020A3 (en) In-band dpi application awareness propagation enhancements
WO2007144867A3 (en) Voice over ip capturing
WO2008079337A3 (en) Systems, methods, and apparatus for communicating the state of a wireless user device in a wireless domain to an application server in an internet protocol (ip) domain
ATE556513T1 (de) Verfahren zur erkennung von transportlecks in hybridschaltungsnetzwerken
WO2008012792A3 (en) A method and system for detection of nat devices in a network
WO2009067443A3 (en) Geographic trunk groups
WO2008032256A3 (en) Automatic packet tagging
WO2007083899A3 (en) Method and apparatus for providing congestion and travel time information to users
EP2037652A3 (en) Methods and apparatuses for detecting whether user equipment resides in a trusted or a non-trusted access network
WO2008052128A3 (en) Detecting and preventing man-in-the middle phishing attacks
WO2008088271A8 (en) Lightweight mobility architecture
GB201203406D0 (en) Automatic address range detection for IP networks
WO2009042056A3 (en) Multiple and multi-part message methods and systems for handling electronic message content for electronic communications devices
DE602007004482D1 (de) Verfahren und vorrichtung zum nachweis von weiterleitungsschleifen
WO2008108821A3 (en) Virtual security interface

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07790493

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2009522445

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 07790493

Country of ref document: EP

Kind code of ref document: A1