METHOD FOR DETECTING REMOTE ATTACKS IN COMPUTER NETWORK Russian patent published in 2002 - IPC

FIELD: computer engineering. SUBSTANCE: method used for networks where communications among subscribers are effected by transmitting data bursts in compliance with TCP protocol includes watching traffic of data bursts arriving at subscriber, checking these data bursts according to specified rules, and sending signal to take measures for protection against unauthorized access when check reveals adherence to mentioned rules. In order to detect attempts of unauthorized access made on behalf of fraudulently assigned name of other subscriber of network traffic of data bursts addressed to subscriber is watched including permanently resumed counting of burst number executed within series of bursts arriving one after other in time intervals exceeding those specified; arriving data bursts are checked for compliance with specified rules each time when size of arriving series under check rises to critical number of bursts. EFFECT: facilitated procedure. 4 cl, 4 dwg