Multiplex communications – Pathfinding or routing – Switching a message which includes an address header
Reexamination Certificate
2011-02-15
2011-02-15
Wu, Daniel (Department: 2612)
Multiplex communications
Pathfinding or routing
Switching a message which includes an address header
Reexamination Certificate
active
07889735
ABSTRACT:
A method and apparatus for defending against a Denial of Service attack wherein a target victim of an attack has recognized the existence of an attack and identified its source. The carrier network which provides service to the victim automatically receives one or more IP (Internet Protocol) source/destination IP address pairs from the victim, and then limits (e.g., blocks) the transmission of packets from the identified source address to the identified destination address. The carrier may implement this filtering capability as a stand-alone box included in the network, or as a line card incorporated into otherwise conventional network elements already present in the network. The source/destination address pairs to be blocked may be advantageously communicated from the victim with use of security signatures and with use of redundant connections from the victim to the carrier network to ensure receipt even under congested network conditions.
REFERENCES:
patent: 5198607 (1993-03-01), Livingston et al.
patent: 5907485 (1999-05-01), Van Loo et al.
patent: 6594268 (2003-07-01), Aukia et al.
patent: 6611521 (2003-08-01), McKay et al.
patent: 6834037 (2004-12-01), Hansson et al.
patent: 7197009 (2007-03-01), Dispensa
patent: 7301899 (2007-11-01), Goldstone
patent: 2002/0032793 (2002-03-01), Malan et al.
patent: 2002/0032854 (2002-03-01), Chen et al.
patent: 2002/0118644 (2002-08-01), Moir
patent: 2002/0138599 (2002-09-01), Dilman et al.
patent: 2003/0037141 (2003-02-01), Milo et al.
patent: 2004/0054925 (2004-03-01), Etheridge et al.
patent: 2005/0050364 (2005-03-01), Feng
patent: 2005/0157647 (2005-07-01), Sterne et al.
patent: 2005/0216955 (2005-09-01), Wilkins et al.
patent: 2006/0077964 (2006-04-01), Wu et al.
patent: 2006/0098585 (2006-05-01), Singh et al.
patent: 2006/0156407 (2006-07-01), Cummins
patent: 2006/0174130 (2006-08-01), Noble
patent: WO 02/25402 (2002-03-01), None
patent: WO 03/001333 (2003-01-01), None
patent: WO 03/005666 (2003-01-01), None
Lakshminarayanan, K. et al., “Taming IP Packet Flooding Attacks,” ACM SIGCOMM Computer Communication Review, vol. 34, Issue 1 (Jan. 2004), Column: Papers from Hotnets-II, pp. 45-50, 2004.
Argyraki, K. et al., “Active Internet Trafice Filtering: Real-Time Response to Denial-of-Service Attacks,” USENIX Association, 2005 USENIX Annual Technical Conference, pp. 135-148, Apr. 10, 2005.
Marques, P. et al., “Dissemination of flow specification rules”, IETF Internet Draft draft-marques-idr-flow-spec-02.txt, Dec. 2004.
PCT International Search Report dated Aug. 12, 2006.
Alcatel-Lucent USA Inc.
Brown Kenneth M.
Ott Frederick
Wu Daniel
LandOfFree
Method and apparatus for defending against denial of service... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for defending against denial of service..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for defending against denial of service... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2628171