Patent ID: 8844019

Claim:
A computer network security method comprising the steps of: at a security gateway, of a computer network, that receives incoming packets at a network interface of said security gateway, for at least a portion of said incoming packets: (a) applying at least one security function to each said incoming packet of said at least portion; (b) if said each incoming packet violates one of said at least one security function, logging a report, of said each incoming packet, that includes a record of a source address of said each incoming packet, a time of receipt of said each incoming packet, and a description of said violation of said one security function; (c) assigning a weight to said report; and (d) if a sum of said weights, for said incoming packets that share a common said source address and that are received within a first predetermined time interval, exceeds a predetermined threshold: dropping at least a portion of subsequently received packets that have said common source address.