US 2010/0246592 A1Published application

Load balancing method for network intrusion detection

AssigneeInventec Corporation

InventorsXiao-Qian Li, Tom Chen

Life of this patent

Estimating the term…

Loading patent…

Abstract

A load balancing method for network intrusion detection includes the following steps. Packets are received from a client. The data packets include a protocol type and a protocol property. An intrusion detection procedure is loaded on a receiving end. A corresponding request queue is set for each intrusion detection procedure. The request queue is used for storing the data packets. The data packets are processed a separation procedure, and are categorized into data packets of a chain type and data packets of a non-chain type according to the protocol type. The data packets of the chain type are processed by a first distribution procedure. The data packets of the non-chain type are processed by a second distribution procedure. The distribution procedures distribute the data packets to the corresponding request queues according to the protocol property. The corresponding intrusion detection procedure is performed on the data packets in each request queue.

Claims6

Dependent claims

A load balancing method for network intrusion detection, wherein a receiving end performs load processing on received data packets, the method comprising:

receiving a plurality of data packets from a client, wherein the data packets at least comprise a protocol type and a protocol property;
loading at least an intrusion detection procedure on the receiving end;
setting a corresponding request queue for each of the intrusion detection procedures, wherein the request queue is used to store the data packets;
processing the data packets by a separation procedure, wherein the separation procedure categorizes the data packets into data packets of a chain type and data packets of a non-chain type according to the protocol type;
processing the data packets of the chain type to a first distribution procedure, wherein the first distribution procedure distributes the data packets to the corresponding request queue according to the protocol property;
processing the data packets of the non-chain type to a second distribution procedure, wherein the second distribution procedure distributes the data packets to the corresponding request queue according to the protocol property;
and
performing the corresponding intrusion detection procedure on the data packets in each of the request queues.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 12/414,784Filed 31 Mar 2009
Published: 30 Sep 2010
Term ends: Not estimatedThe source records don’t support an estimate.

Classification4 codes

H04L 63/1416
By monitoring network traffic: event detection, e.g. attack signature detection
H04L 67/1001
In which an application is distributed across nodes in the network: for accessing one among a plurality of replicated servers
H04L 67/1023
Server selection for load balancing: based on a hash applied to IP addresses or costs
H04L
Digital communication

Family

No related US applications are recorded in the indexed filing history.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key