| 摘要 |
PROBLEM TO BE SOLVED: To provide a improved network protocol for alleviating a network amplification attack. SOLUTION: An absolute network load, which may cause any of tentative distributed attacks, is restricted based on a resource crediting scheme. The protocol according to the present invention accumulates a "credit" when a candidate attack request packet is received and detected. It withdraws the credit when a response packet is transmitted. In some of embodiments, a time frame of such attack is restricted using a time limit applied to the resource crediting scheme. Other resources including CPU duty cycle, storage capacity, and power etc. can be restricted by the resource crediting scheme. COPYRIGHT: (C)2006,JPO&NCIPI
|
