The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
May. 25, 2010
Filed:
Dec. 07, 2004
Sandeep Kumar, Cupertino, CA (US);
Yi Jin, San Jose, CA (US);
Sunil Potti, Castro Valley, CA (US);
Christopher R. Wiborg, Mountain View, CA (US);
Sandeep Kumar, Cupertino, CA (US);
Yi Jin, San Jose, CA (US);
Sunil Potti, Castro Valley, CA (US);
Christopher R. Wiborg, Mountain View, CA (US);
Cisco Technology, Inc., San Jose, CA (US);
Abstract
A method is disclosed for protecting a network against a denial-of-service attack by inspecting application layer messages at a network element. According to one aspect, when a network element intercepts data packets that contain an application layer message, the network element constructs the message from the payload portions of the packets. The network element determines whether the message satisfies specified criteria. The criteria may indicate characteristics of messages that are suspected to be involved in a denial-of-service attack, for example. If the message satisfies the specified criteria, then the network element prevents the data packets that contain the message from being received by the application for which the message was intended. The network element may accomplish this by dropping the packets, for example. As a result, the application's host does not waste processing resources on messages whose only purpose might be to deluge and overwhelm the application.