Patent ID: 7039950

Claim:
A method of ensuring a quality of services being provided by a protected network of computers during an ongoing security breach, the quality of the services being ensured by performing secure Quality of Service (sQoS) actions on one or more data packets, the data packets being directed from one or more source computers to a destination computer, the source computers and the destination computer being a part of a network of computers, the sQoS actions being performed in response to receiving a triggering information from an external system, the triggering information comprising information regarding the type of attack, the method comprising the steps of: a. performing the sQoS actions on each of the data packets, the actions depending on the triggering information received, the step of performing the sQoS actions on each of the data packets further comprising the steps of: i. determining whether the triggering information corresponds to an attack, ii. if the triggering information corresponds to an attack, then checking whether the attack is a counter based Distributed Denial of Service(DDoS) attack, iii. if the attack is a counter based DDoS attack, then performing the following steps: 1. performing the actions corresponding to a counter based DDoS attack, and 2. processing the packet against an Intrusion Attack Table(IAT), the IAT containing records, the records storing information corresponding to packet based attacks and sequence based attacks by one or more source computers, iv. if the triggering information corresponds to an attack and if the attack is not counter based DDoS attack, then performing the following steps: 1. performing the actions corresponding to a packet based attack, a sequence based attack or a counter based DoS attack, and 2. processing the packet against the IAT, and v. if the triggering information does not correspond an attack, then processing the packet against the IAT; and b. releasing the data packets after the sQoS actions are performed.