Patent ID: 8375435
Filing Date: 2013-02-12
Classification: H04L

Abstract:
1. A computer implemented method to throttle traffic from a source internet protocol address, the method comprising: inspecting payloads of a plurality of packets, each packet having a source address identical to the source internet protocol address and a target address corresponding to a receiver host; responsive to detecting purported good content within at least one of the plurality of packets, forwarding packets having the source address; determining whether a count of packets having the source address exceeds a safe threshold; responsive to a determination that the count of packets having the source address exceeds the safe threshold, requesting a demanded positive trust report from the receiver host; determining whether a positive trust report is received from the receiver host that indicates that the source internet protocol address is good; responsive to a determination that the positive trust report is received from the receiver host, analyzing a header of a packet having the source address without analyzing a payload of the packet; and determining if the source internet protocol address lacks an association with a good host profile, wherein the step of inspecting payloads is responsive to the determination that the source internet protocol address lacks association with the good host profile.