| 摘要 |
<P>PROBLEM TO BE SOLVED: To provide an excellent DoS attack interruption performance while reducing resource consumption of a content filtering system. <P>SOLUTION: The DoS attack interruption method includes: a packet level interruption stage of interrupting a packet when a destination IP address of the packet coincides with any one of IP addresses in an IP table, by a packet level interruption system; a first determination stage of analyzing contents in the packet to determine whether or not the analyzed contents satisfy a DoS attack reference, by a content filtering system; a second determination stage of confirming whether or not the packet satisfies a specific condition; and a content base interruption stage of interrupting the packet when the attack reference is satisfied at the first determination stage. The second determination stage is performed when the attack reference is satisfied at the first determination stage. When the specific condition is satisfied at the second determination stage, information on the destination IP address of the packet is added to the IP table. <P>COPYRIGHT: (C)2012,JPO&INPIT |
