US 2013/0159540 A1 · SYSTEMS AND METHODS FOR AGGRESSIVE WINDOW PROBING

Abstract

The present application is directed towards systems and methods for aggressively probing a client side connection to determine and counteract a malicious window size attack or similar behavior from a malfunctioning client. The solution described herein detects when a connection may be under malicious attach via improper or unusual window size settings. Responsive to the detection, the solution described herein will setup probes that determine whether or not the client is malicious and does so within an aggressive time period to avoid the tying up of processing cycles, transport layer sockets and buffers, and other resources of the sender.

Claims20

Dependent claims

A system for probing a connection of a client, the system comprising:

a device intermediary to a client and a server, the device configured to establish a first transport layer connection with the client responsive to receiving a request by the client to establish a transport layer connection with the server, the client identifying a window size for the first transport layer connection less than a maximum segment size;
and
wherein the device is configured to drop packets sent from the client identifying that the window size is still less than the maximum segment size in response to a window probe, and upon determining that the client has not increased the window size responsive to a predetermined number of window probes, the device is configured to disestablish the first transport layer connection.

Dependencies are inferred from the claim text.

Systems and methods for aggressive window probing

Life of this patent

Systems and methods for aggressive window probing

Life of this patent

Abstract

Claims20