Patent ID: 6772334
Filing Date: 2004-08-03
Classification: H04L

Abstract:
A system for preventing a spoofed denial of service attack in a networked computing environment, comprising:a hierarchical protocol stack comprising a plurality of communicatively interfaced protocol layers with at least one session-oriented protocol layer and receiving a packet from the networked computing environment requesting a session with the session-oriented protocol layer, the request packet comprising headers containing a source address of uncertain trustworthiness, the hierarchical protocol stack receiving an acknowledgement packet from the networked computing environment comprising headers containing an acknowledgement number; and an authentication module acknowledging the request packet and validating the acknowledgement packet, comprising: a checksumming module calculating a checksum from information included in the request packet headers and calculating a validation checksum from information included in the acknowledgement packet headers; a packet module generating request acknowledgement packet comprising headers containing the checksum as a pseudo sequence number and the source address in the request packet headers as a destination address and sending the request acknowledgement packet into the networked computing environment; and a comparison module comparing the validation checksum to the acknowledgement number of the acknowledgement packet.