Patent classifications
H04L61/5092
Counteracting MAC address randomization and spoofing attempts
Systems and methods are provided for determining whether dissimilar device identifiers in a network actually represent the same physical device. A method, according to one implementation, includes obtaining first and second sets of operational parameters related to first and second set of devices operating in a section of a network. The first and second sets of operational parameters include first and second sets of device identifiers representing the first and second sets of devices, respectively. The method also includes comparing the first set of device identifiers with the second set of device identifiers to find non-matching device identifiers. With respect to the non-matching device identifiers, the first and second sets of operational parameters are analyzed to determine if a device identifier of the first set of device identifiers and a device identifier of the second set of device identifiers likely represent the same device.
LOCAL AREA NETWORK (LAN) DEVICE PRIVACY
Aspects of the present disclosure relate to wireless communications, and more particularly, to techniques for increasing local area network (LAN) device privacy. One aspect provides a method for wireless communications at an access point (AP). The method generally includes: determining a mapping between a first distribution system (DS) medium access control (MAC) address and a second DS MAC address; obtaining, from a source access terminal, a frame having the second DS MAC address; and sending at least a portion of the frame to a target access terminal based on the mapping between the first MAC address and the second MAC address.
ADDRESS GENERATION FOR NETWORKS
A network includes at least two nodes that employ a routing protocol to communicate across a network. One of the nodes is a parent node and another of the nodes is a child node of the parent node. An address generator assigns a unique network address to the child node by appending an address value of a number of bits to a parent address of the parent node to create the unique network address for the child node.
ADDRESS GENERATION FOR NETWORKS
A network includes at least two nodes that employ a routing protocol to communicate across a network. One of the nodes is a parent node and another of the nodes is a child node of the parent node. An address generator assigns a unique network address to the child node by appending an address value of a number of bits to a parent address of the parent node to create the unique network address for the child node.
METHOD AND APPARATUS FOR DEVICE-TO-DEVICE COMMUNICATION
Various embodiments of the present disclosure provide a method for direct device-to-device communication. The method which may be performed by a first device comprises generating an Internet protocol address of the first device. The Internet protocol address of the first device may be applicable for direct device-to-device communication between the first device and a second device via a third device. The method further comprises transmitting the Internet protocol address to the third device. According to various embodiments of the present disclosure, the relaying for direct device-to-device communication may be implemented efficiently and flexibly.
METHODS AND PROCEDURES FOR THE DYNAMIC MAC ADDRESS DISTRIBUTION IN IEEE 802.11 NETWORKS
Methods and apparatuses are described for dynamic medium access control (MAC) address distribution in a wireless network. A station (STA) may receive, from an access point (AP), a frame that includes an indicator indicating at least one MAC address type or MAC address policy supported by an extended service set (ESS) associated with the AP. The indicator may comprise an 8 bit bitmap. The STA may then transmit, to the AP, a request message that includes MAC Address Assignment Protocol information determined based on the at least one MAC address type or MAC address policy. The STA may receive a response message that includes a local medium access control (MAC) address assigned based on the MAC Address Assignment Protocol information. The STA may transmit, to the AP, an association request frame with the local MAC address.
METHODS AND PROCEDURES FOR THE DYNAMIC MAC ADDRESS DISTRIBUTION IN IEEE 802.11 NETWORKS
Methods and apparatuses are described for dynamic medium access control (MAC) address distribution in a wireless network. A station (STA) may receive, from an access point (AP), a frame that includes an indicator indicating at least one MAC address type or MAC address policy supported by an extended service set (ESS) associated with the AP. The indicator may comprise an 8 bit bitmap. The STA may then transmit, to the AP, a request message that includes MAC Address Assignment Protocol information determined based on the at least one MAC address type or MAC address policy. The STA may receive a response message that includes a local medium access control (MAC) address assigned based on the MAC Address Assignment Protocol information. The STA may transmit, to the AP, an association request frame with the local MAC address.
Internet address structure analysis, and applications thereof
An analysis system automates IP address structure discovery by deep analysis of sample IPv6 addresses using a set of computational methods, namely, information-theoretic analysis, machine learning, and statistical modeling. The system receives a sample set of IP addresses, computes entropies, discovers and mines address segments, builds a network model of address segment inter-dependencies, and provides a graphical display with various plots and tools to enable a network analyst to navigate and explore the exposed IPv6 address structure. The structural information is then applied as input to applications that include: (a) identifying homogeneous groups of client addresses, e.g., to assist in mapping clients to content in a CDN; (b) supporting network situational awareness efforts, e.g., in cyber defense; (c) selecting candidate targets for active measurements, e.g., traceroutes campaigns, vulnerability assessments, or reachability surveys; and (d) remotely assessing a network's addressing plan and address assignment policy.
Link model for multi-prefix packet system bearer
A second internet protocol network is logically connected to a packet data network connection provided between a user equipment and a first internet protocol network over a radio access network, the second internet protocol network located on a data path from the first internet protocol network to the user equipment. The first internet protocol network represents the highest level internet protocol point of attachment to the packet data network connection. Router advertisements are sent from the second internet protocol network to the user equipment over the radio access network via the packet data network connection.
DHCP SERVER IP ADDRESS ALLOCATION IMPROVEMENT TO NULLIFY THE IMPACT OF MAC RANDOMIZATION
A Dynamic Host Configuration Protocol (DHCP) server includes a memory storing computer-readable instructions, and a processor configured to execute the computer-readable instructions to determine a media access control (MAC) address associated with a client, determine the MAC address associated with the client is a randomized MAC address, and assign an IP address the client from a DHCP IP server pool. The processor assigns an IP address to the client from a DHCP IP server pool using one of identifying, in a DHCP server table, at least one host name of the client and assigning a previously assigned IP address to the at least one host name of the client, and when the host name of the client is not available, assigning the IP address using a first lease with a first duration shorter than a default lease duration used for non-randomized MAC addresses.