DISTRIBUTED DENIAL OF SERVICE ATTACK PREVENTING METHOD, GATE DEVICE, COMMUNICATION DEVICE, AND PROGRAM

摘要

PROBLEM TO BE SOLVED: To limit the transmission band of offensive traffic for a distributed denial of service (DDoS) attack while securing communication traffic for regular users.

SOLUTION: When the suspicious offensive packet of the DDoS attack is detected, a gate device 2001 transmits the suspicious signature and the regular condition of the suspicious offensive packet to upstream communication devices 2002 and 2003. Each of the communication devices 2002 and 2003 cancels the transmission band limitation of the packet identified from the regular condition and a regular signature created based upon the suspicious signature while limiting the transmission band of the packet identified from the suspicious signature. Further, each of the communication devices 2003 and 2003 transmits the suspicious signature and the regular condition to further upstream communication devices to report the suspicious signature and the regular condition to the upper- most stream communication device in the recursive manner and each communication device further limits the band by detecting the offensive packet from the suspicious offensive packets while implementing the band limitation of the suspicious offensive packet.

COPYRIGHT: (C)2004,JPO