System and method for protecting a TCP connection serving system from high-volume of TCP connection requests

摘要

To prevent system crashes, as by denial-of-service attacks, of TCP/IP (Transmission Control Protocol/Internet Protocol) networks, this invention regulates the volume of TCP connection requests that await service at a TCP/IP connection control table. For this purpose, the usage of the system is monitored on a dynamic basis, the time-out value T_ho is dynamically computed, and requests that have been awaiting service for a period of time that exceeds T_ho are removed from the TCP/IP connection control table.