Dynamic DoS flooding protection
US7331060B1 · kind B1 · utility
Assignee
Inventor
Key dates
| Filing date | Sep 10, 2002 |
| Grant date | Feb 12, 2008 |
| Priority date | — |
| Expiry date | Nov 4, 2024 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1458
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Detecting and protecting against denial of service flooding attacks that are initiated against an end system on a computer network. In accordance with one aspect of the invention, a filter is established at a network location. The filter prevents data packets received at a first network location and deemed responsible for the denial of service flooding condition from being forwarded to a subsequent network location. Data packets received at the first network location are then monitored to determine whether the flow of any data packets from a network source exhibit a legitimate behavior, such as where the flow of data packets exhibits a backoff behavior. The filter is then modified to permit data packets that exhibit legitimate behavior to pass through the filter.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.