Patent ID: 7854000

Claim:
A method for addressing attacks on a computer connected to a network comprising: receiving at a router a TCP SYN request to be screened; comparing the received TCP SYN request to be screened to at least one stored tuple representative of one or more SYN requests previously received at the router and determining that the received TCP SYN request to be screened matches the stored tuple; and in response to the determination that the received TCP SYN request to be screened matches the stored tuple, incrementing a counter associated with the stored tuple; and in response to the counter reaching a threshold: preventing the router from sending a TCP SYN+ACK response in response to the TCP SYN request to be screened; dropping the TCP SYN request to be screened; and preventing the router from allocating a transmission control block (TCB) for the TCP SYN request to be screened.