US 7,627,677 B2 · Process to thwart denial of service attacks on the internet

Abstract

Coordinated SYN denial of service (CSDoS) attacks are reduced or eliminated by a process that instructs a switch to divert SYN rackets destined to a server to a TCP proxy which, when subject to a CSDoS attack, will not successfully establish a TCP connection with a host. CSDoS attacks are reduced or eliminated by a process that includes forwarding a sampling of packets destined to a server to a processor and, when packets in the sampling indicate an attack, arranging the switch to divert all packets destined to the server to the processor. CSDoS attacks are reduced or eliminated in a system including a switch, a server, and a processor, where the processor is adapted to control the network switch to divert all SYN packets destined to the server to the processor based on monitoring a number of timed-out connections between the processor and one or more clients.

Claims19

Dependent claims

A method for thwarting coordinated SYN denial of service (CSDoS) attacks against a server S disposed in a network of interconnected elements communicating using the TCP protocol, the attack originating from a malicious host generating SYN packets destined for the server, comprising:

arranging a switch receiving the SYN packets destined to the server to forward the SYN packets to a TCP proxy;
wherein the TCP proxy, when subject to a CSDoS attack, does not successfully establish a TCP connection with the malicious host, and no TCP connection is made from the TCP proxy to the server, thereby protecting the server from the attack.

Dependencies are inferred from the claim text.

Process to thwart denial of service attacks on the internet

Life of this patent

Process to thwart denial of service attacks on the internet

Life of this patent

Abstract

Claims19