Server resource management, analysis, and intrusion negotiation

摘要

A console host and intrusion negation system (CHAINS) includes a host component and a console component. The host component monitors resources at a server. Resources that are becoming overloaded can be throttled back. Reports relating to resource usage may be transmitted to the console component. At the console component, resource reports from multiple host components may be viewed and managed.

主权项

1. A method comprising:
monitoring a plurality of resources associated with a network server, the plurality of resources including a communication interface of the network server and a processor of the network server, wherein monitoring the plurality of resources includes determining a number of open network connections using the communication interface of the network server; comparing activity levels of the plurality of resources to predetermined threshold activity levels; and reducing usage of one of the plurality of resources when the activity level associated with the one of the plurality of resources increases above the predetermined threshold activity level associated therewith, wherein reducing usage of the one of the plurality of resources includes:
reducing the number of open network connections to obtain a first number of open network connections by closing open network connections based on a priority of the open network connections, shutting down an open but inactive network connection, and refusing to open new network connections;comparing the first number of open network connections with a number of open network connections threshold; andin the event that the first number of open network connections is greater than or equal to the number of open network connections threshold, randomly close an open network connection.