Method and system for protecting communication networks from physically compromised communications

• US 20080025229A1
• Filed: 07/27/2006
• Published: 01/31/2008
• Est. Priority Date: 07/27/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Beliles, Robert Pryor, Civilini, Massimo, Dasmalchi, Glenn, Chow, Peter
• Granted Patent: US 7,881,209 B2
• Time in Patent Office: Days
• US Class Current: 370/245
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A method and system for protecting a packet switched network from compromised communications due to a physical intrusion in the network are disclosed. The network includes at least one network element having a detection device operable to detect a possible physical intrusion in a data communication path connected to the network element. The method includes receiving a notification from the detection device that the detection device has identified a physical intrusion in the data communication path, generating an alert, and transmitting the alert over the packet switched network. The alert may include instructions on how to remediate the physical intrusion that can be automatically implemented by a given network-connected device or manually addressed by a network user or network administrator.

Claims

1. A method for protecting a packet switched network from compromised communications due to a physical intrusion in said packet switched network, said packet switched network including at least one network element comprising a detection device operable to detect a physical intrusion in a data communication path connected to said network element, the method comprising:

receiving a notification from the detection device that the detection device has identified a physical intrusion in said data communication path;

generating an alert; and

transmitting said alert over said packet switched network.

2. The method of claim 1 further comprising performing an action to secure said packet switched network upon receiving said notification from the detection device.

3. The method of claim 2 wherein performing said action comprises shutting down a port of said network element connected to said data communication path.

4. The method of claim 2 wherein performing said action comprises changing a policy at said network element connected to said data communication path.

5. The method of claim 2 wherein performing said action comprises redirecting traffic from said data communication path.

6. The method of claim 2 wherein performing said action comprises encrypting data transmitted over said data communication path.

7. The method of claim 2 wherein performing said action comprises:

sending instructions to another network element coupled to said data communication path to operate in a high impedance mode; and

sending a high voltage signal over said data communication path.

8. The method of claim 1 further comprising identifying an intrusion point along said data communication path.

9. The method of claim 1 wherein transmitting said alert comprises transmitting an e-mail to one or more users.

10. The method of claim 1 wherein transmitting said alert comprises sending a signal to at least one other network element in said packet switched network.

11. The method of claim 1 wherein transmitting said alert comprises sending an audio or video message to one or more network users.

12. The method of claim 1 further comprising identifying the risk of the physical intrusion detected by the detection device.

13. The method of claim 12 further comprising generating and transmitting said alert only if said risk is above a predetermined risk level.

14. A system for protecting a packet switched network from compromised communications due to a physical intrusion in said packet switched network, said packet switched network including at least one network element comprising a detection device operable to detect a physical intrusion in a data communication path connected to said network element, the system comprising an alert generator operable to receive a notification from the detection device that the detection device has identified a physical intrusion in said data communication path and generate and transmit an alert over said packet switched network.

15. The system of claim 14 further comprising a security enforcer operable to secure said packet switched network upon receiving said notification from the detection device.

16. The system of claim 14 wherein said security enforcer is configured to shut down a port of said network element connected to said data communication path.

17. The system of claim 14 wherein said security enforcer is configured to change a policy at said network element connected to said data communication path.

18. The system of claim 14 wherein said security enforcer is configured to redirect traffic from said data communication path.

19. The system of claim 14 wherein said security enforcer is configured to initiate data encryption for data transmitted over said data communication path.

20. The system of claim 14 wherein said security enforcer is configured to transmit instructions to another network element coupled to said data communication path to operate in a high impedance mode and transmit a high voltage signal over said data communication path.

21. The system of claim 14 further comprising a risk analyzer configured for identifying the risk of the physical intrusion detected by the detection device.

22. A computer program product for protecting a packet switched network from compromised communications due to a physical intrusion in said packet switched network, said packet switched network including at least one network element comprising a detection device operable to detect a physical intrusion in a data communication path connected to said network element, the method comprising:

code that receives a notification from the detection device that the detection device has identified a physical intrusion in said data communication path;

code that generates an alert;

code that transmits said alert over said packet switched network; and

a computer readable medium for storing said codes.

23. The computer program product of claim 22 further comprising code that initiates an action to secure said packet switched network upon receiving said notification from the detection device.

24. The computer program product of claim 22 further comprising code that analyzes a risk associated with the physical intrusion detected by the detection device.

25. A system for protecting a packet switched network from compromised communications due to a physical intrusion in said packet switched network, said packet switched network including at least one network element comprising a detection device operable to detect a physical intrusion in a data communication path connected to said network element, the system comprising:

means for receiving a notification from the detection device that the detection device has identified a physical intrusion in said data communication path;

means for generating an alert; and

means for transmitting said alert to one or more network users or one or more of said plurality of network elements.