METHOD AND SYSTEM TO ACTIVELY DEFEND NETWORK INFRASTRUCTURE

摘要

Disclosed is an invention related to a system and device for actively defending a network infrastructure by implementing certain features that are attributed with lower performance cost and network complexity. The features implemented for protecting the network infrastructure comprises of: protecting the network from hostile scanning, providing a faster authenticated and limited access response to a network traffic request for sage guarding dedicated connections, intervening a TCP connection that is established between one or more clients and servers for terminating unwanted connections, and cleaning up SYN flood attacks to terminate one or more outstanding TCP connection.