Method and apparatus for preventing distributed denial of service attack
AssigneeAhnlab, Inc.
InventorsChan Hee Park, Woo Kyum Kim
Life of this patent
Estimating the term…
Abstract
An apparatus for preventing a distributed denial of service (DDoS) attack transmits a redirect message containing a redirect URL (Uniform resource Locator) to a client terminal that has transmitted a request for accessing a web server, in place of the web server. The apparatus authenticates the client terminal that re-sends the request for accessing the web server as a normal client terminal, and permits the client terminal to access the web server.
Claims23
An apparatus for preventing a distributed denial of service (DDoS) attack, the apparatus comprising:
- a communication unit configured to receive a packet of a request for accessing a web server from a client terminal in place of the web server;
- a packet processing unit configured to analyze the received packet and extract packet information including at least one of internet protocol (IP) address and hypertext transfer protocol (HTTP) protocol information from the received packet;
- and
- a control unit configured to check the IP address of the client terminal using the extracted information, provide a redirect message containing a redirect URL (Uniform resource Locator) to the client terminal, authenticate the client terminal that has re-sent the request for accessing the web server to the redirect URL as a normal client terminal, and permit the client terminal to access the web server.
A method for preventing a distributed denial of service (DDoS) attack, the method comprising:
- receiving a packet of a request for accessing a web server from a client terminal in place of the web server;
- checking internet protocol (IP) address of the client terminal based on the received packet;
- transmitting a redirect message containing a URL (Uniform Resource Locator) to be redirected to the client terminal;
- checking whether or not the request for accessing the web server is received from the client terminal using the redirect message;
- if the request for accessing the web server is received, authenticating the client terminal as a normal client terminal;
- and
- permitting the authenticated client terminal to access the web server.
Dependencies are inferred from the claim text.