Network and application attack protection based on application layer message inspection
US7725934B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Dec 7, 2004 |
| Grant date | May 25, 2010 |
| Priority date | — |
| Expiry date | Nov 23, 2026 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L2463/141
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A method is disclosed for protecting a network against a denial-of-service attack by inspecting application layer messages at a network element. According to one aspect, when a network element intercepts data packets that contain an application layer message, the network element constructs the message from the payload portions of the packets. The network element determines whether the message satisfies specified criteria. The criteria may indicate characteristics of messages that are suspected to be involved in a denial-of-service attack, for example. If the message satisfies the specified criteria, then the network element prevents the data packets that contain the message from being received by the application for which the message was intended. The network element may accomplish this by dropping the packets, for example. As a result, the application's host does not waste processing resources on messages whose only purpose might be to deluge and overwhelm the application.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.