Method and system for protecting a computer system from denial-of-service attacks and other deleterious resource-draining phenomena related to communications
US8341727B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Mar 10, 2008 |
| Grant date | Dec 25, 2012 |
| Priority date | — |
| Expiry date | Jun 9, 2031 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/02
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Embodiments of the present invention include a variety of different integrated, multi-tiered methods and systems for preventing various types of attacks on computer systems, including denial-of-service attacks and SYN-flood attacks. Components of these integrated methods and systems include probabilistic packet droppers, packet-rate throttles, resource controls, automated firewalls, and efficient connection-state-information storage in memory resources and connection-state-information distribution in order to prevent draining of sufficient communications-related resources within a computer system to seriously degrade or disable electronics communications components within the computer system.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.