| 摘要 |
<p>The invention prevents 'packet flooding', where an attacker uses up all available bandwidth to a victim (18) with useless data. It can also be used to prevent some other related denial of service attacks. The defense is distributed among cooperating sites (18) and routers (22). The sites (18) identify data they don't want. The routers (22) help sites to determine which routers (22) forward that data. The sites (18) then ask these routers (22) to reduce the rate (34) at which such data (30) is forwarded. Variations of the defense protect against packet flooding attacks on routers (22) and attacks in which an attacker tries to use up some service offered by a site (18).</p> |
