Patent ID: 11902320
Assignee: BOARD OF TRUSTEES OF THE UNIVERSITY OF ALABAMA, FOR AND ON BEHALF OF THE UNIVERSITY OF ALABAMA IN HUNTSVILLE
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 9:
10. A server computer comprising:
a communication interface to communicate with a plurality of client computers via a network;
a processing unit coupled to the communication interface and configured to execute instructions; and
a memory having the instructions stored thereon and coupled to the processing unit to provide the instructions to the processing unit, wherein the instructions cause the processing unit to:
communicate with each client computer of a plurality of client computers connected to the server computer according to a first mode, wherein communication according to the first mode includes changing an Internet Protocol (IP) address provided to the plurality of client computers at a first interval;
determine whether an initial attack occurred at the server computer;
identify one or more attacking client computers from the plurality of client computers upon a determination that an initial attack occurred at the server computer;
communicate with the one or more attacking client computers according to a second mode, wherein communication according to the second mode includes changing the IP address provided to the one or more attacking client computers at a second interval less than the first interval;
determine whether a subsequent attack by the one or more attacking computers occurred at the server computer within a predetermined time period from the identification of the one or more attacking computers;
identify at least one malicious client computer from the one or more attacking client computers upon a determination that a subsequent attack occurred at the server computer;
prevent the at least one malicious computer from registering with the server computer; and
communicate with the one or more attacking client computers according to the first mode upon a determination that a subsequent attack did not occur at the server computer within the predetermined time period.