发明授权
- 专利标题: Method for managing of denial of service attacks using bandwidth allocation technology
- 专利标题(中): 使用带宽分配技术管理拒绝服务攻击的方法
-
申请号: US10375799申请日: 2003-02-27
-
公开(公告)号: US08161145B2公开(公告)日: 2012-04-17
- 发明人: Brian E. Carpenter , Clark D. Jeffries , Andreas Kind , Michael S. Siegel
- 申请人: Brian E. Carpenter , Clark D. Jeffries , Andreas Kind , Michael S. Siegel
- 申请人地址: US NY Armonk
- 专利权人: International Business Machines Corporation
- 当前专利权人: International Business Machines Corporation
- 当前专利权人地址: US NY Armonk
- 代理机构: Yee & Associates, P.C.
- 代理商 Jennifer Davis
- 主分类号: G06F15/173
- IPC分类号: G06F15/173
摘要:
A method for managing attacks in a computer system is disclosed. The computer system is used in sending, receiving, or sending and receiving a plurality of packets, which include a plurality of administrative packets. The method includes determining whether a congestion of the administrative packets exists. Congestion of the administrative packets indicates that a potential attack exists. The method also includes discarding a portion of the plurality of administrative packets if it is declared that the congestion of the administrative packets exists. The portion of the plurality of packets is sufficient to ensure that a remaining portion of the plurality of packets transmitted is not more than a maximum administrative packet bandwidth limit and, if the plurality of administrative packets present a sufficient offered load, not less than a minimum administrative packet bandwidth guarantee.