7,207,062 Method and apparatus for protecting web sites from distributed denial-of-service attacks
  Issued: April 17, 2007
  Filed: June 19, 2002
  U.S. Class: 726/13
Abstract:  An Internet Service Provider (ISP), in consideration of being remunerated in some manner by a site, determines whether packets destined to that site conform to a profile provided to the ISP by that site. The profile, indicates, for example, what protocols are allowed by the server, and, for each such protocol, what destination port numbers or message types are allowed, a maximum transmission rate, the maximum number of allowed connections a client may have, and whether to enforce congestion-avoidance. This server profile enforcement (SPE) automatically thwarts denial of service attacks from attackers that send packets to the subscribing server from that ISP using connections or having packet characteristics that do not conform to the acceptable characteristics specified in the profile. SPE is generally performed by an SPE unit, which can be incorporated in the access gateways of an ISP that supports the service. Packets may also be forwarded in multiple classes of service depending upon the type of traffic from which they originate. Multiple classes of service allow the method to be effective even if deployed only by select ISPs.

Posted by GEN-ERIC at 09:48:18 am into the following categories: Patents of the Day

---

http://gen-eric.com/patents/htsrv/trackback.php/1126

Name:

Email: (not displayed on this site)

Site/Url:

Comment text:

Allowed XHTML tags: <p, ul, ol, li, dl, dt, dd, address, blockquote, ins, del, a, span, bdo, br, em, strong, dfn, code, samp, kdb, var, cite, abbr, acronym, q, sub, sup, tt, i, b, big, small>

URLs, email, AIM and ICQs will be converted automatically.

Options:
Auto-BR (Line breaks become <br />)
Remember me (Set cookies for name, email & url)