Reflexive benign service attack on IoT device(s)
AssigneeBank of America Corporation
InventorsMichael Ogrinz, David Hsiang, John C. Checco
Life of this patent
Estimating the term…
Abstract
A method is provided for preventing an IoT device within a trusted system from being harnessed in a malicious DDOS attack. The method may include bombarding the IoT device. The bombardment may originate from within the system, and may inundate the IoT device with harmless packets in a manner mimicking a traditional DOS attack. The inundating may utilize the resources of the IoT device to respond to the bombardment, and may thereby render the IoT device unavailable for fraudulent uses.
Claims18
A partially secure, internet-connected system, comprising:
- at least one Internet-of-Things (IoT) device;
- said IoT device comprising a connection to the internet;
- said connection to the internet comprising a gateway node;
- said gateway node comprising hardware and/or software, and connected to said IoT device and the internet;
- wherein an element of said system bombards the IoT device with communications packets in a manner mimicking a traditional Denial-Of-Service (DOS) attack;
- said bombardment directing the IoT device's resources to responding to the bombardment, said bombardment further comprising a dynamic high-level mode of bombardment, said high-level bombardment being established dynamically based on a current IoT device functionality, wherein the system preserves an amount of resources necessary for the current IoT device functionality, said high-level bombardment fully utilizing the resources remaining above said amount of preserved resources, said dynamic high-level bombardment preventing the IoT device from sending any packets unnecessary for the current IoT device functionality, while maintaining the current device functionality;
- and
- said directing of resources prevents the device from being harnessed in a malicious Distributed-Denial-Of-Service (DDOS) attack.
A method of preventing an Internet-of-Things (IoT) device within a trusted system from being harnessed in a malicious Distributed-Denial-Of-Service (DDOS) attack, the method comprising:
- bombarding the IoT device;
- said bombardment originating from an element within the system;
- said bombardment inundating the IoT device with harmless packets in a manner mimicking a traditional DOS attack, said bombardment further comprising a dynamic high-level mode of bombardment, said high-level bombardment being established dynamically based on a current IoT device functionality, wherein the system preserves the amount of resources necessary for the current IoT device functionality, said high-level bombardment fully utilizing the resources remaining above said amount of preserved resources, said dynamic high-level bombardment preventing the IoT device from sending any packets unnecessary for the current IoT device functionality, while maintaining the current device functionality;
- and
- said inundating utilizing the resources of the IoT device to respond to said bombardment, thereby rendering the IoT device unavailable for fraudulent uses.
A partially secure, internet-connected system, comprising:
- at least one Internet-of-Things (IoT) device that has sensor functionality to measure, record, and/or transmit data regarding its environment;
- said IoT device comprising a connection to the internet;
- said connection to the Internet comprising a gateway node;
- and
- said gateway node comprising hardware and/or software, and connected to said IoT device and the internet;
- wherein said gateway node broadcasts a message indicating that said IoT device is fully utilized, thereby creating the outward-facing perception of unavailability of resources;
- and
- wherein the system is configured to provide a dynamic high-level mode of bombardment, said high-level bombardment being established dynamically based on a current IoT device functionality, wherein the system preserves an amount of resources necessary for the current IoT device functionality, said high-level bombardment fully utilizing the resources remaining above said amount of preserved resources, said dynamic high-level bombardment preventing the IoT device from sending any packets unnecessary for the current IoT device functionality, while maintaining the current device functionality.
Dependencies are inferred from the claim text.