Patent ID: 7719976
Filing Date: 2010-05-18
Classification: H04L

Abstract:
1. A method of variable dynamic throttling of network traffic in a network for intrusion prevention, the method implemented by a throttle module in a network host, the network host comprising a computer that receives data communications packets from the network, the method comprising: initializing, as throttling parameters, a predefined time interval, a packet count, a packet count threshold, a throttle rate, a keepers count, and a discards count; starting a timer, the timer remaining on no longer than the predefined time interval; maintaining, while the timer is on, statistics including the packet count, the keepers count, and the discards count; for each data communications packet received by the network host, determining, in dependence upon the statistics and the throttle rate, whether to discard the packet and determining whether the packet count exceeds the packet count threshold; and if the packet count exceeds the packet count threshold: resetting the statistics, incrementing the throttle rate, and restarting the timer.