| CPC H04L 63/1425 (2013.01) | 15 Claims |

|
11. A method comprising:
detecting one or more non-compliant nodes with respect to a timing schedule;
detecting one or more compliant nodes with respect to the timing schedule, wherein the timing schedule is based on one or post-synchronization messages that are based on one or more remote performance measurements including one or more frame ingress time measurements; and
identifying a malicious node based on positions of the one or more non-compliant nodes and the one or more compliant nodes in a network topography, wherein the positions refer to placements of the one or more non-compliant nodes and the one or more compliant nodes with respect to one or more paths within the network topography, wherein the one or more non-compliant nodes and the one or more compliant nodes are to be detected based on the one or more post-synchronization messages.
|