Back to results
US 2011/0239301 A1Published application
Technique of detecting denial of service attacks
AssigneeInternational Business Machines Corporation
InventorsPATRICIA ANN JAKUBIK, PATRICK MICHAEL LIVECCHI, LINWOOD HUGH OVERBY, JR.
Life of this patent
Estimating the term…
Abstract
The invention detects a denial of service attack at a node by monitoring the number of discarded packets in relationship to the number of inbound packets. When an attack is detected, relevant inbound packet information is collected during the attack to help characterize the attack and at least to pinpoint the source of the last hop to the attacked node.
Claims10
1-9. (canceled)
A computer hardware device for detecting a denial of service attack at a network server, comprising:
- a processor configured to perform:
- counting a number of inbound packets and a number of discarded packets in a specified interval,
- responsive to the number of discarded packets in the specified interval exceeding a specified minimum, calculating a percentage of discarded packets, the percentage of discarded packets is the number of discarded packets divided by the number of inbound packets,
- responsive to the percentage of discarded packets exceeding a specified threshold, setting a denial of service event marker.
1 more element
Dependencies are inferred from the claim text.