Patent ID: 7814542
Filing Date: 2010-10-12
Classification: G06F,H04L

Abstract:
1. A network edge device, comprising: one or more processors; a receive logic to receive a network traffic from a first network; a connection daemon logic to detect and intercept connection attempts from a plurality of sources in the network traffic; wherein a connection attempt pertains to opening a TCP/IP connection for communicating data packets; a pattern detector logic to identify a deviant source from the plurality of sources by comparing a series of connection attempts from one or more of the plurality of sources to a set of connection patterns that identify deviant activity; a throttler enforcer logic to buffer connection attempts from the deviant source to produce buffered connection attempts and to issue the buffered connection attempts to a second network according to a recurrence threshold based on a binary exponential backoff algorithm; wherein the throttler enforcer logic is configured to reduce bandwidth provided to the deviant source; and an output logic to output the network traffic to the second network; wherein the throttler enforcer logic increases the recurrence threshold based, at least in part, on an indication by the pattern detector logic that the deviant source is continuing deviant activity; and wherein increasing the recurrence threshold delays issue of the buffered connection attempts.