Patent ID: 8505091
Filing Date: 2013-08-06
Classification: G06F,H04L

Abstract:
1. A method of protecting against a denial-of-service (DOS) attack by a network device, the method comprising: receiving a network packet; classifying the received network packet according to a particular type of network traffic as defined by configurable rules set in a configuration file; assigning the received network packet to a specific meter of a number of meters based upon the classification of the received network packet, wherein the specific meter includes a meter count and a copy bit; determining, by the network device, whether the copy bit of the specific meter is set; adjusting the meter count of the specific meter in response to a determination that the copy bit is not set; determining that a DoS attack is in progress based upon a value of the adjusted meter count of the specific meter; copying the received network packet from the specific meter to a processor; suppressing the copying of subsequently received network packets from the specific meter to the processor; and periodically adding a predetermined fixed number of counts to the meter count before the adjusted meter count reaches a threshold.