Patent ID: 7899817
Filing Date: 2011-03-01
Classification: G06F

Abstract:
1. At computer system, the computer system including a processor, the computer system also including an inverse query engine configured to evaluate messages against query expressions, a method of mitigating Denial Of Service (“DOS”) attacks against the inverse query engine, the method comprising: tuning one or more thresholds for use in a runtime safe mode to provide a desired level of safety for the inverse query engine that balances permitted query expression functionality against the susceptibility of the inverse query engine to Denial of Service (“DOS”) attacks; receiving a message from a third party, the message including a plurality of message inputs used in runtime evaluation of the message against query expressions, wherein each query expression include a series of queries that comprise one or more conditions, criteria, or rules that must be satisfied by one or more inputs for a query to evaluate to true, and wherein the runtime evaluation of the message determines which of the message inputs satisfy at least one of the query expressions; the processor dynamically adjusting the tuned one or more thresholds based on a known reliability of the third party, the known reliability based on historical data about the monitoring of other messages receives from the third party; initiating runtime evaluation of the message inputs against the query expressions to produce query results; a runtime evaluation module externally monitoring the ongoing runtime evaluation of message inputs against the query expressions to detect a DOS attack on the inverse query engine, including: in response to determining that at least one of the dynamically adjusted tuned one or more thresholds has been exceeded: