Patent ID: 8493972

Claim:
A method for detecting malicious packets, the method comprising: determining, using one or more processing units, whether a first input packet comprises data; determining, using one or more processing units, whether a second input packet comprises data; comparing, using the one or more processing units, a sequence number of said first input packet with sequence numbers of one or more previously input packets when it is determined that said first input packet comprises data; detecting, using one or more processing units, a malicious packet when said sequence number of said first input packet matches at least one of said sequence numbers of said one or more previously input packets; and allowing, using the one or more processing units, said second input packet to pass, without storing a sequence number of said second input packet in a database of sequence numbers of previously input packets and without comparing the sequence number of said second input packet with sequence numbers of one or more previously input packets, when it is determined that said second input packet does not comprise data.