专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

3. 发明公开

KR1020130116456A 이상 패킷 차단 시스템 및 방법 有权
标题翻译：分布式服务攻击防御系统和方法
公开(公告)号：KR1020130116456A
公开(公告)日：2013-10-24
申请号：KR1020120031661
申请日：2012-03-28
申请人： 에스케이브로드밴드주식회사
发明人： 오후균
IPC分类号： H04L12/22 , H04L12/26 , H04L12/70
CPC分类号： H04L63/306 , H04L49/501 , H04L63/0227 , H04L63/1458 , H04L63/308
摘要： PURPOSE: An abnormal packet blocking system and a method thereof are provided to extract one blocking target among client terminals and a target server of an attack and allow or block the access of the blocking target. CONSTITUTION: A network switch (20) detects the status of overload generation from abnormal packets transmitted by multiple client terminals. An abnormal packet analyzing device (30) receives overload generation information from the network switch. The abnormal packet analyzing device analyzes the information of the abnormal packets collected through the network switch and extracts a target to be blocked. An access blocking management device (40) creates a blocking filter by using access information of the blocking target extracted by the abnormal packet analyzing device. The access blocking management device delivers the blocking filter to the network switch. [Reference numerals] (10) Customer terminal; (20) Network switch; (30) Abnormal packet analyzing device; (40) Access blocking management device; (50) Attack target device; (AA) Block target; (BB) Backbone network; (CC) Overload generating information; (DD) Member network; (EE,II) Block; (FF) Access allowing or blocking information; (GG,HH) Attack
摘要翻译：目的：提供异常分组封锁系统及其方法，在客户终端和攻击目标服务器之间提取一个阻塞目标，并允许或阻止阻塞目标的访问。规定：网络交换机（20）检测由多个客户终端发送的异常报文的过载生成状态。异常分组分析装置（30）从网络交换机接收过载生成信息。异常分组分析设备分析通过网络交换机收集的异常报文的信息，并提取要阻止的目标。访问阻断管理设备（40）通过使用由异常分组分析设备提取的阻止目标的访问信息来创建阻塞过滤器。访问阻塞管理设备将阻塞过滤器传递给网络交换机。（附图标记）（10）客户终端; （20）网络交换机; （30）分组分析装置异常; （40）接入管理设备; （50）攻击目标设备; （AA）阻止目标; （BB）骨干网; （CC）过载生成信息; （DD）会员网络; （EE，II）块; （FF）访问允许或阻止信息; （GG，HH）攻击

IPRDB

热门服务

关于我们

友情链接

联系方式