In IP network the service failure for the mannered null target victim who defends DoS attack

摘要

I want to provide a method and apparatus to protect against DoS attacks that identify the source target victims of the attack to recognize the existence of the attack. Automatically receive IP of one or more (Internet Protocol) source / destination IP address pair from the victim, then, carrier network to provide victim services, to the destination address that has been identified from the source address identified (for example, the cut-off) to limit the transmission of a packet. As a stand-alone box included in the network, the carrier can, as a line card incorporated into network elements of conventional already present in the network, to implement the filtering capability or otherwise. In order to ensure reception even in congested network conditions, by using security signatures and by using redundant connections from the victim, the source / destination address pair to be blocked, communication carrier network from victims that it is is possible is advantageous.