| 发明名称 |
APPARATUS AND METHOD FOR DETECTING SLOW READ DoS ATTACK |
| 摘要 |
A method for detecting a slow read DoS attack in a virtualized environment, the method comprising: receiving a connection request packet transmitted from a client to a server using a web protocol; checking whether the received packet is a TCP SYN packet or a packet of an HTTP GET request message; when it is checked that the received packet is the packet of the HTTP GET request message, detecting whether the received packet is a packet for the slow read DoS attack by analyzing a window size of the HTTP GET request message. |
| 申请公布号 |
US2014304817(A1) |
申请公布日期 |
2014.10.09 |
| 申请号 |
US201414154888 |
申请日期 |
2014.01.14 |
| 申请人 |
Electronics and Telecommunications Research Institute |
发明人 |
KIM Byoung-Koo;CHOI Yangseo;KIM Ik Kyun |
| 分类号 |
H04L29/06 |
主分类号 |
H04L29/06 |
| 代理机构 |
|
代理人 |
|
| 主权项 |
1. A method for detecting a slow read DoS attack in a virtualized environment, the method comprising:
receiving a connection request packet transmitted from a client to a server using a web protocol; checking whether the received packet is a TCP SYN packet or a packet of an HTTP GET request message; when it is checked that the received packet is the packet of the HTTP GET request message, detecting whether the received packet is a packet for the slow read DoS attack by analyzing a window size of the HTTP GET request message. |
| 地址 |
Daejeon KR |
