Show simple item record

dc.contributor.authorMartin, Bryan J.
dc.contributor.authorTummala, Murali
dc.contributor.authorMcEachen, John C.
dc.date.accessioned2018-08-24T19:29:38Z
dc.date.available2018-08-24T19:29:38Z
dc.date.issued2018-08-14
dc.identifierUS 10,050,731 B1
dc.identifier.urihttp://hdl.handle.net/10945/59515
dc.description.abstractThe disclosure provides an apparatus and method for the detection of multi-homed hosts on a computer network utilizing a network comprising a plurality of host computers and a central host. Each host computer has one or more network interfaces and transmits TCP packets over the network to the other hosts and the central host. The central host monitors exchanged traffic and sorts received timestamped TCP packets by source address, and utilizes the sorted packets to determine a clock skew associated with each source address. Generally the host computer conducts this process over multiple iterations and provides a representative clock skew, with the representative clock skew typically bounded by a confidence interval determined through probability distribution fitting. The apparatus and method compares the representative clock skews to determine similarity and identify potentially multi-homed hosts.en_US
dc.format.extent22 p.en_US
dc.language.isoen_USen_US
dc.publisherThe United States of America, as represented by the Secretary of the Navy, Washington, DC (US)en_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.
dc.subjectPatenten_US
dc.titleApparatus and method for detecting a multi-homed device using clock skewen_US
dc.typePatenten_US


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record