Hardware filtering support for denial-of-service attacks

Details Hardware filtering support for denial-of-service attacks Hardware filtering support for denial-of-service attacks

H - Electricity

04

L

H04L 9/00 (2006.01) H04L 12/56 (2006.01) H04L 29/02 (2006.01)

Patent

CA 2559251

A system and method is provided for automatically identifying and removing malicious data packets, such as denial-of-service (DoS) packets, in an intermediate network node before the packets can be forwarded to a central processing unit (CPU) in the node. The CPU's processing bandwidth is therefore not consumed identifying and removing the malicious packets from the system memory. As such, processing of the malicious packets is essentially "off-loaded" from the CPU, thereby enabling the CPU to process non-malicious packets in a more efficient manner. Unlike prior implementations, the invention identifies malicious packets having complex encapsulations that can not be identified using traditional techniques, such as ternary content addressable memories (TCAM) or lookup tables.

La présente invention concerne un système et un procédé permettant d'identifier et d'éliminer automatiquement des paquets de données malveillants, tels que des paquets de déni de services (DoS) dans un de réseau intermédiaire avant que ces paquets puissent être renvoyés à une unité centrale (UC) dans ce noeud. La bande passante de traitement de l'UC est par conséquent non consommée par l'identification et l'élimination de ces paquets malveillants de la mémoire système. Ainsi, le traitement des paquets malveillants est sensiblement = déchargé = de l'UC, permettant ainsi à l'UC de traiter des paquets non malveillants d'une manière plus efficace. A la différence des mises en oeuvre précédentes, cette invention identifie des paquets malveillants possédant des encapsulations complexes qui ne peuvent être identifiées au moyen de techniques classiques, tels que des mémoires adressables à contenu ternaire (TCAM) ou des tables de recherche.

Affiliated with

Also associated with

Rating

Hardware filtering support for denial-of-service attacks does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Hardware filtering support for denial-of-service attacks, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Hardware filtering support for denial-of-service attacks will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFCA-PAI-O-1699810