LIMITING THE EFFICACY OF A DENIAL OF SERVICE ATTACK BY INCREASING CLIENT RESOURCE DEMANDS

摘要

A device may detect an attack. The device may receive, from a client device, a request for a resource. The device may determine, based on detecting the attack, a computationally expensive problem to be provided to the client device, where the computationally expensive problem requires a computation by the client device to solve the computationally expensive problem. The device may instruct the client device to provide a solution to the computationally expensive problem. The device may receive, from the client device, the solution to the computationally expensive problem. The device may selectively provide the client device with access to the resource based on the solution.

主权项

1. A device, comprising:
one or more processors to:
detect a denial-of-service attack;receive a request, for access to a resource, from a client device;determine, based on the request and further based on detecting the denial-of-service attack, a computationally expensive problem to be provided to the client device;provide the computationally expensive problem to the client device,
the computationally expensive problem being provided to cause the client device to solve the computationally expensive problem;receive, from the client device, a solution to the computationally expensive problem; andgrant or deny the client device access to the resource based on the solution.