Method and system for intrusion detection and prevention based on packet type recognition in a network

摘要

Certain aspects of a method and system for intrusion detection and prevention based on packet type recognition in a network are disclosed. Aspects of one method may include determining a packet type for each of a plurality of received network packets based on at least one of: a header and content of each of the plurality of received network packets. The rate at which the plurality of received network packets are handled at a port in the network switching device may be regulated based on a number of occurrences of the determined packet type of the plurality of received network packets.

主权项

1. A method for handling data in a communication network, the method comprising:
performing by one or more processors, one or more circuits, or any combination thereof:
determining a packet type for each of a plurality of network packets received by a network switching device based on a portion of content of each of said plurality of received network packets; andblocking at least a portion of said plurality of received network packets at an input port to regulate a rate at which network packets of said determined packet type are handled at said input port based on information relating to a number of occurrences of said determined packet type that occur within a time period, wherein said information is based on said determined packet type.