Patent ID: 9628441
Date: 2017-04-18
CPC Classifications: H04L

Claim:
1. An attack defense method, comprising: receiving a key negotiation request message from the client after a Transmission Control Protocol (TCP) connection to a client is established, wherein the key negotiation request message comprises a source internet protocol (IP) address, a user name that is a machine name associated with the client and used to distinguish an independent access source, and a session identity of the client; determining, according to the source IP address and the user name of the client, whether a session monitoring table of the client exists, wherein the session monitoring table is used to record the source IP address, the user name, and the session identity of the client that has performed key negotiation; determining whether the session identity exists in the session monitoring table of the client when the session monitoring table of the client exists; recording the session identity into the session monitoring table when the session identity does not exist in the session monitoring table; determining whether a quantity of the session identities of the client in the session monitoring table is greater than a first preset value; and disconnecting the TCP connection when the quantity of the session identities of the client in the session monitoring table is greater than the first preset value.