Systems and methods for protecting a server computer
AssigneeKabushiki Kaisha Toshiba
InventorsShin-ichi Kanno, Masamichi Tateoka
Life of this patent
Estimating the term…
Abstract
A server computer protection apparatus protects a server computer against DoS attacks, but allows access to the server. The server computer protection apparatus comprises a unit configured to calculate the load state of the server computer on the basis of the number of data requests made upon the server computer, and the number of data responses of the server responsive to the data requests, and for changing the rate of data requests to be transferred to the server, in accordance with the load state.
Claims17
A server computer protection apparatus for protecting a server computer against attacks, wherein the protection apparatus is coupled to client computers and the server computer is different and separate from the protection apparatus, the protection apparatus comprising:
- a data request acceptance unit configured to accept data requests sent from client computer;
- at least one request measurement unit configured to measure a number of data requests which have arrived from said client computers within a predetermined time period;
- a response measurement unit configured to measure a number of responses which have been made from said server computer to said client computers within the predetermined time period;
- at least one server load calculation unit configured to obtain a load state of said server computer by using measurements of said request measurement unit and said response measurement unit;
- and
- a data request transfer unit configured to change a rate of the number of data requests based on the load state determined by said server load calculation unit,
- wherein said server load calculation unit is configured to store said load state of said server computer;
- wherein said server load calculation unit changes the value stored in accordance with a new load state of said server computer;
- wherein, as said changed value exhibits a higher load, the rate of said number of the data requests which are to be transferred to said server computer is decreased by said data request transfer unit;
- and
- wherein, as said changed value exhibits a lower load, the rate of said number of the data requests which are to be transferred to said server computer is increased by said data request transfer unit.
(canceled)
A server computer protection method used in a protection apparatus for protecting a server computer against attacks, wherein the protection apparatus is coupled to client computers and the server computer is different and separate from the protection apparatus, comprising:
- accepting data requests sent from client computer;
- measuring a number of data requests which have arrived from said client computers within a predetermined time period;
- measuring a number of responses which have been made from said server computer to said client computers within the predetermined time period;
- obtaining a load state of said server computer by using the number of the data requests and the number of the responses;
- changing a rate of the number of data requests based on the obtained load state;
- changing a prestored value in accordance with the obtained load state of said server computer as corresponds to said client computer;
- lowering the rate of said number of the data requests which are to be transferred to said server computer as the stored value exhibits a higher load;
- and
- raising the rate of said number of the data requests as said stored value exhibits a lower load.
(canceled)
17-24. (canceled)
Dependencies are inferred from the claim text.