DETECTING AND PREVENTING ROUTER-SOLICITATION FLOOD ATTACKS

摘要

An electronic device may receive a control packet from the second electronic device with a request for information about a router. Then, the electronic device may provide a response to the second electronic device with the information about the router, where the response is provided using unicast communication. Next, the electronic device may receive an optional acknowledgment from the second electronic device. Furthermore, the electronic device may store response information that indicates the response was provided to the second electronic device and the optional acknowledgment was received. When the electronic device receives one or more subsequent control packets from the second electronic device with the request for the information about the router, the electronic device may determine that there is malicious activity based at least in part on the response information and may perform a remedial action.