Method and system for preventing DOS attacks
AssigneeCisco Technology, Inc.
InventorsJai Balasubramaniyan, Kuntal Daftary
Life of this patent
Estimating the term…
Abstract
A method, system and apparatus for preventing Denial of Service (DOS) attacks on a device are provided. The method includes determining that the device is receiving DOS attack vectors. The method further includes identifying the attack vector with the highest idle time and removing the identified attack vector. Further, the method includes repeating identifying and removing the identified attack vector until the number of attack vectors falls below a threshold value.
Claims18
A method for preventing Denial of Service (DOS) attacks on a device, comprising determining that the device is receiving DOS attack vectors;
- identifying the attack vector with the highest idle time;
- removing the identified attack vector;
- and
- repeating identifying the attack vectors and removing the identified attack vector until the number of attack vectors falls below a threshold value.
A system for preventing DOS attacks on a device, comprising:
- means for determining that the device is receiving DOS attack vectors;
- means for identifying the attack vectors;
- and means for removing the identified attack vectors.
A system for preventing Denial of Service (DOS) attacks on a device, comprising
- an attack identifier for determining that the device is receiving DOS attack vectors;
- an attack vector identifier for identifying the attack vectors;
- and
- an attack vector remover for removing the identified attack vectors.
An apparatus for preventing Denial of Service (DOS) attacks on a device, comprising
- a processor;
- and
- a machine-readable medium including instructions executable by the processor comprising
- one or more instructions for determining that the device is receiving DOS attack vectors;
- one or more instructions for identifying the attack vector with the highest idle time;
- and
- one or more instructions for removing the identified attack vector.
A machine-readable medium including instructions executable by one or more processors for preventing Denial of Service (DOS) attacks on a device, comprising
- one or more instructions for determining that the device is receiving DOS attack vectors;
- one or more instructions for identifying the attack vector with the highest idle time;
- and
- one or more instructions for removing the identified attack vector.
Dependencies are inferred from the claim text.