The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 14, 2018

Filed:

Jan. 27, 2017
Applicant:

The United States of America, As Represented BY the Secretary of the Navy, Washington, DC (US);

Inventors:

Bryan J. Martin, Pacific Grove, CA (US);

Murali Tummala, Monterey, CA (US);

John C. McEachen, Carmel, CA (US);

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
H04J 3/06 (2006.01); H04L 12/741 (2013.01); H04L 12/721 (2013.01);
U.S. Cl.
CPC ...
H04J 3/0661 (2013.01); H04L 45/72 (2013.01); H04L 45/745 (2013.01);
Abstract

The disclosure provides an apparatus and method for the detection of multi-homed hosts on a computer network utilizing a network comprising a plurality of host computers and a central host. Each host computer has one or more network interfaces and transmits TCP packets over the network to the other hosts and the central host. The central host monitors exchanged traffic and sorts received timestamped TCP packets by source address, and utilizes the sorted packets to determine a clock skew associated with each source address. Generally the host computer conducts this process over multiple iterations and provides a representative clock skew, with the representative clock skew typically bounded by a confidence interval determined through probability distribution fitting. The apparatus and method compares the representative clock skews to determine similarity and identify potentially multi-homed hosts.


Find Patent Forward Citations

Loading…