Cisco Technology, Inc.

Kip R McClanahan

Robert H Locklear, Jr

Craig S Cantrell

Dennis James Cox

James J Crow

Satyanarayana B Rao

John Francis McHale

James R Sisk

William Keith Brewer

Jonathan Harrod

Anthony J P Carew

A method is provided for blocking attacks on a private network (). The method is implemented by a routing device () interconnecting the private network () to a public network (). The method includes analyzing an incoming data packet from the public network (). The incoming data packet is then matched against known patterns where the known patterns are associated with known forms of attack on the private network (). A source of the data packet is then identified as malicious or non-malicious based upon the matching. In one embodiment, one of the known forms of attack is a denial of service attack and an associated known pattern is unacknowledged data packets. In another embodiment, one of the known forms of attack is an address spoofing attack and an associated known pattern is a data packet having a source address matching an internal address of the private network ().

Method for blocking denial of service and address spoofing attacks on a private network

A set of packetized fragments in which only a portion of the fragments carry translation information for the set of fragments is translated by storing in a memory fragments received before the translation information. In response to receiving the translation information, the fragments stored in the memory are translated based on the translation information. After receipt of the translation information, fragments are translated as they are received based on the translation information.

Method and system for processing fragments and their out-of-order delivery during address translation

A method is provided for blocking attacks on a private network ( ). The method is implemented by a routing device ( ) interconnecting the private network ( ) to a public network ( ). The method includes analyzing an incoming data packet from the public network ( ). The incoming data packet is then matched against known patterns where the known patterns are associated with known forms of attack on the private network ( ). A source of the data packet is then identified as malicious or non-malicious based upon the matching. In one embodiment, one of the known forms of attack is a denial of service attack and an associated known pattern is unacknowledged data packets. In another embodiment, one of the known forms of attack is an address spoofing attack and an associated known pattern is a data packet having a source address matching an internal address of the private network ( ).

A communication system includes a number of communication devices coupled to a data network using communication servers. The communication system supports communication sessions between a variety of networks and devices using, at least in part, XDSL communication techniques. Specifically, information associated with a session passes between a device and an associated server using a modifiable number of XDSL modems and associated twisted pair lines.

Data communication using a modifiable number of XDSL modems

A remote XDSL transceiver unit (,) includes an XDSL transceiver (,) and a control block (,). The XDSL transceiver (,) is operable to establish and communicate across an XDSL physical layer. The control block (,) is coupled to the XDSL transceiver (,) and operates to transmit a request for service to a loop termination point. The control block (,) also operates to identify a signal received from the loop termination point (,) and respond based upon a current context of the remote XDSL transceiver unit (,). Further, the control block (,) operates to control power-up and training of the XDSL transceiver (,) such that the XDSL physical layer can be dynamically brought up and down. In one embodiment, the control block (,) operates to store profile information for an established XDSL physical layer to use for future re-establishing of the XDSL physical layer.

Remote XDSL transceiver unit and method of operation

A communication system includes an access server that communicates information between a wide area network (WAN) and a local area network (LAN). The access server includes a WAN interface, a switch fabric, a number of route processors, and a LAN interface. The switch fabric directs information from the WAN interface to a selected route processor based on its loading characteristics.

Growing community of inventors

Austin, TX, United States of America

Kip R McClanahan