Radware has filed a patent for a method to secure data over a communication network. The method involves detecting and identifying malicious data transferred via a router, generating a list of potential attackers, narrowing down the list to verified attackers, and creating attack signatures to identify port scanning traffic. These attack signatures are then sent to the router for enhanced security. GlobalData’s report on Radware gives a 360-degree view of the company including its patenting strategy. Buy the report here.
Smarter leaders trust GlobalData
Access deeper industry intelligence
Experience unmatched clarity with a single platform that combines unique data, AI, and human expertise.
According to GlobalData’s company profile on Radware, Automation system authentication was a key innovation area identified from patents. Radware's grant share as of September 2023 was 70%. Grant share is based on the ratio of number of grants to total number of patents.
Method for securing data over a communication network
A recently filed patent (Publication Number: US20230319078A1) describes a method for securing data over a communication network. The method involves detecting communication data transferred via a router in the network and applying an anomaly detection process to identify malicious data sent through the router. A list of candidate Internet Protocol (IP) addresses that may be sending malicious data is generated and sent to the router. Additional telemetry about data received from the IP addresses in the list is collected to narrow down the list to verified attackers. One or more attack signatures are then generated to identify port scanning traffic from the IP addresses and sent to the router.
The method also includes providing additional telemetry, such as source IP address/port number, destination IP address/port number, and communication protocol used, to increase the sampling rate of packets sent from the IP addresses in the list of candidates. A counter is monitored to track the number of times a specific IP address appears in the list of candidates sending malicious data. The anomaly detection process involves detecting synchronizing acknowledgement messages and measuring the amount of echo requests sent from source IP to multiple destination IP addresses.
In cases where the malicious data is sent from an IP address operating behind a Network Address Translation (NAT) system, the method includes detecting information related to packets sent from the NAT system that include legitimate traffic. A packet signature is generated to identify only port scanning traffic, and the router's Access Control List (ACL) is programmed with these signatures to prevent data transfer from the attacking IP addresses.
The list of candidates is sent to the router using a software-defined network protocol, such as Netconf, which is capable of configuring the router.
Additionally, the patent describes a router device with a programmable memory that includes a processor configured to perform the method's instructions. The router device detects communication data, applies an anomaly detection process to identify malicious data, generates a list of candidate IP addresses, processes additional telemetry about data received from the candidates, and generates attack signatures to identify port scanning traffic.
Overall, this patent presents a method and system for securing data over a communication network by detecting and mitigating malicious data sent through a router. The method includes various techniques for anomaly detection, narrowing down the list of attackers, and generating attack signatures to protect against port scanning attacks.
To know more about GlobalData’s detailed insights on Radware, buy the report here.
Data Insights
From
The gold standard of business intelligence.
Blending expert knowledge with cutting-edge technology, GlobalData’s unrivalled proprietary data will enable you to decode what’s happening in your market. You can make better informed decisions and gain a future-proof advantage over your competitors.
GlobalData, the leading provider of industry intelligence, provided the underlying data, research, and analysis used to produce this article.
GlobalData Patent Analytics tracks bibliographic data, legal events data, point in time patent ownerships, and backward and forward citations from global patenting offices. Textual analysis and official patent classifications are used to group patents into key thematic areas and link them to specific companies across the world’s largest industries.
