Methods and systems for preventing socket flooding during denial of service attacks

A computer program product comprising one or more computer-readable media having computer-executable instructions for implementing a method for reducing denials of service during a denial of service attack in a networked environment, wherein the network includes one or more client computer systems that make requests for information from a server computer system, the server computer system providing information in response to the requests from the one or more client computer systems, and the server computer system includes one or more listen sockets and a backlog queue for queuing connection requests that the server computer system cannot currently handle, and wherein the method comprises:

• receiving a denial of service attack comprising a plurality of connection requests from a client computer system without receiving any associated request data for the plurality of corresponding connection requests;
• establishing a connection socket for at least one of the plurality of connection requests without placing the connection request in a backlog queue;
• for each connection request for which the server computer system cannot currently establish a connection socket, placing the connection request in the backlog queue without then establishing a connection socket;
• and
• identifying and disconnecting one or more of the connection sockets that are suspected to be serving a malicious connection request and that have not received associated request data for the one or more corresponding connection requests, so as to reduce any affect of the denial of service attack.