DEFENDING AGAINST FLOW ATTACKS

摘要

A network device maintains a sharing token bucket for all sessions in a semi-connection state; a packet is received by the network device; a flow control for the packet is performed by using the sharing token bucket when determining the packet conforms to the semi-connection state; and a flow control for the packet is performed by using a dedicated token bucket of a session corresponding to the packet when determining the packet conforms to a full-connection state.