Prevention of denial of service attacks
AssigneeIntel Corporation
InventorsPriya Govindarajan, David M. Durham
Life of this patent
Estimating the term…
Loading patent…
AssigneeIntel Corporation
InventorsPriya Govindarajan, David M. Durham
Estimating the term…
Denial of service type attacks are attacks where the nature of a system used to establish communication sessions is exploited to prevent the establishment of sessions. For example, to establish a Transmission Control Protocol (TCP)/Internet Protocol (IP) communication session, a three-way handshake is performed between communication endpoints. When a connection request is received, resources are allocated towards establishing the communication session. Malicious entities can attack the handshake by repeatedly only partially completing the handshake, causing the receiving endpoint to run out of resources for allocating towards establishing sessions, thus preventing legitimate connections. Illustrated embodiments overcome such attacks by delaying allocating resources until after the three-way handshake is successfully completed.
A method, wherein a first acknowledgement was determined based at least in part on a first hash value from applying a hash function to a source of a communication initiation request and a first time stamp, the method comprising:
A method, wherein a first acknowledgement was determined based at least in part on a first hash value from applying a hash function to a source of a communication initiation request and a first time stamp, the method comprising:
An article, comprising a processing device accessible media storing data for operating one or more processing devices, wherein a first acknowledgement is determined based at least in part on a first hash value from applying a hash function to a source of a communication initiation request and a first time stamp, and wherein the data, when accessed, results in the one or more processing devices performing:
A system of cooperatively executing circuitry, comprising:
Dependencies are inferred from the claim text.