公开(公告)号：US08018845B2

公开(公告)日：2011-09-13

申请号：US11339597

申请日：2006-01-25

申请人： Natale Ruello ,  Farrukh Reza Naqvi ,  Anusankar Elangovan ,  Gaetano Borgione ,  Suran De Silva

发明人： Natale Ruello ,  Farrukh Reza Naqvi ,  Anusankar Elangovan ,  Gaetano Borgione ,  Suran De Silva

IPC分类号： H04J1/16 ,  H04J3/14 ,  H04L1/00 ,  H04L12/26

CPC分类号： H04L43/022 ,  H04L43/16

摘要： Out-of-profile rate-limited traffic is sampled to provide data for analysis, such as for, but not limited to, identifying a threat condition such as a denial-of-service or other malicious attack, or a non-malicious attack such as an error in configuration. A rate limiter including at least three states is typically used, with one of these states being an out-of-profile sampling state wherein the packet traffic is sampled to identify one or more sampled packets on which analysis can be performed, with defensive action possibly taken in response to the analysis.

摘要翻译： 采样失速率限制流量以提供用于分析的数据，例如用于但不限于识别威胁状况，例如拒绝服务或其他恶意攻击，或非恶意攻击，例如非恶意攻击 作为配置错误。 通常使用包括至少三个状态的速率限制器，其中这些状态之一是失真采样状态，其中对分组业务进行采样以识别可以在其上进行分析的一个或多个采样分组，具有可能的防御动作 作为回应分析。