Method and device for defending dhcp attack
AssigneeHangzhou DPtech Technologies Co., Ltd.
InventorsXuecong Wang, Gang Yu
Life of this patent
Estimating the term…
Abstract
A method for defending a DHCP attack is provided. The method includes monitoring packets transmitted by a client terminal coupled to a target port, and determining, in IP addresses allocated for the client terminal coupled to the target port, the number of the IP addresses generating no packet traffic in a preset first time. And the method further includes if the number of the IP addresses generating no packet traffic reaches a preset first threshold, determining that the client terminal coupled to the target port has risk of attacking, and restricting DHCP service of the target port. A device for defending a DHCP attack is also provided.
Claims14
A method for defending a DHCP (dynamic host configuration protocol) attack, comprising:
- monitoring packets transmitted by a client terminal coupled to a target port, and determining, in IP addresses allocated for the client terminal coupled to the target port, the number of the IP addresses generating no packet traffic in a preset first time;
- and
- if the number of the IP addresses generating no packet traffic reaches a preset first threshold, determining that the client terminal coupled to the target port has risk of attacking, and restricting DHCP service of the target port.
A device for defending a DHCP attack, comprising:
- a monitoring unit for monitoring packets transmitted by a client terminal coupled to a target port, and determining, in IP addresses allocated for the client terminal coupled to the target port, the number of the IP addresses generating no packet traffic in a preset first time;
- and
- a first processing unit for determining that the client terminal coupled to the target port has risk of attacking and restricting DHCP service of the target port when the number of the IP addresses generating no packet traffic reaches a preset first threshold.
Dependencies are inferred from the claim text.