DISTRIBUTED DISABILITY-OF-SERVICE ATTACK PREVENTING METHOD, GATE DEVICE, COMMUNICATION DEVICE, AND PROGRAM

摘要

PROBLEM TO BE SOLVED: To limit the transmission band of offensive traffic of a distributed disability- of-service (DDoS) attack while securing the communication traffic of regular users.

SOLUTION: When the suspicious offensive packet of the DDoS attack is detected, a gate device 2001 reports the transmission band limit value of the suspicious offensive packet to upstream communication devices 2002 and 2003. While limiting the transmission band of the suspicious offensive packet to the received transmission band limit value, the upstream communication devices 2002 and 2003 repeatedly report the transmission band limit value to further upstream communication devices up to the upper- most stream, and each communication device limits the transmission band of the suspicious offensive packet. After the lapse of a fixed time, each upstream communication device reports the input transmission band value of the suspicious offensive packet to downstream communication devices in the recursive manner. The gate device 2001 calculates a transmission band limit adjusted value from the ratio of total input transmission bands and each communication device reports the transmission band limit adjusted value to the lower-most stream communication device in the recursive manner and adjusts the transmission band limit.

COPYRIGHT: (C)2004,JPO