Patent ID: 11902320
Assignee: BOARD OF TRUSTEES OF THE UNIVERSITY OF ALABAMA, FOR AND ON BEHALF OF THE UNIVERSITY OF ALABAMA IN HUNTSVILLE
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 0:
1. A method for detecting an attacker at a server computer, the method comprising:
communicating according to a first mode, by a server computer, with each client computer of a plurality of client computers connected to the server computer, wherein communicating according to the first mode includes changing a care-of address provided to the plurality of client computers at a first interval;
determining, by the server computer, whether an initial attack occurred at the server computer;
identifying, by the server computer, one or more attacking client computers from the plurality of client computers upon a determination that an initial attack occurred at the server computer;
communicating according to a second mode, by the server computer, with the one or more attacking client computers, wherein communicating according to the second mode includes changing the care-of address provided to the one or more attacking client computers at a second interval less than the first interval;
determining, by the server computer, whether a subsequent attack by the one or more attacking computers occurred at the server computer within a predetermined time period from the identification of the one or more attacking computers;
identifying at least one malicious client computer from the one or more attacking client computers upon a determination that a subsequent attack occurred at the server computer;
preventing the at least one malicious computer from registering with the server computer; and
communicating according to the first mode, by the server computer, with the one or more attacking client computers upon a determination that a subsequent attack did not occur at the server computer within the predetermined time period.