Patent ID: 8104078
Filing Date: 2012-01-24
Classification: G06F,H04L

Abstract:
1. A method for preventing network service attacks, the method comprising: processing a received message to validate the message for message version and syntax via a security firewall; canonicalizing at least a portion of the message and extracting a message header and a message body from the message using one or more processors; processing, using the one or more processors, at least a portion of the message header to determine if the message is associated with a network service attack based on frequency information between the received message and one or more other received messages; creating a first Patricia Trie associated with a schema of the canonicalized message body and comparing, via the one or more processors, the first Patricia Trie with a second Patricia Trie associated with a schema of a web service to determine if the schema of the canonicalized message body validates the schema of the web service in identifying whether the received message is a Denial of Service; and preventing access of the received message if the received message body does not validate the schema of the web service.