37results about How to "Avoid Denial of Service Attacks" patented technology

The invention is to provide a method to enhance Ad hoc net security and cooperation mechanism. The method comprises the following stages: an initializing stage which is used to distribute a pair of keys and set initial reputation values for new nodes jointing in the net; a note request stage which is used to send a note request to a neighboring node broadcast when the current note of the node can not pay for the activity transaction; an identity investigation stage which is used for the neighboring node to monitor the behavior of the node, evaluate the different behaviors, calculate the local reputation value and divide the nodes into credible and incredible ones according to the reputation value; a note management stage which is used for the neighboring node to firstly search the node reputation value in a respective reputation table thereof when receiving the node note request and to issue a plurality of notes to the requesting node if the node reputation value is above the threshold value, wherein, in the activity, the node note would have corresponding changes and updates according to the requirement; and a routing and data transferring stage which is used to select routing according to the node reputation.

The method comprises: receiving the management frame to be discriminated; according to the management frame to be discriminated, determining a new frame; according to the new frame, transmitting the class frame to the expected source device; wherein, if the class of the class frame is higher than its corresponding frame above new frame determining step; deciding if receiving a desired frame; wherein, the desired frame has same frame type with the management frame to be discriminated; if receiving the desired frame, the management frame is determined to be a real one.

The invention is to provide a method to enhance Ad hoc net security and cooperation mechanism. The method comprises the following stages: an initializing stage which is used to distribute a pair of keys and set initial reputation values for new nodes jointing in the net; a note request stage which is used to send a note request to a neighboring node broadcast when the current note of the node cannot pay for the activity transaction; an identity investigation stage which is used for the neighboring node to monitor the behavior of the node, evaluate the different behaviors, calculate the localreputation value and divide the nodes into credible and incredible ones according to the reputation value; a note management stage which is used for the neighboring node to firstly search the node reputation value in a respective reputation table thereof when receiving the node note request and to issue a plurality of notes to the requesting node if the node reputation value is above the threshold value, wherein, in the activity, the node note would have corresponding changes and updates according to the requirement; and a routing and data transferring stage which is used to select routing according to the node reputation.

The invention relates to a novel anti-802.11 wireless deauthentication frame flood denial-of-service attack method, and provides a queuing model based on 802.11 wireless clients, including a TCP / IP upper layer module, an MMS‑MDS module, a STA_Air_TX module, and a STA_Air_RX module; the TCP of the wireless client The / IP upper layer module sends the TCP data frame to the MDS queue and waits for the MMS‑MDS module to process in turn; when the wireless client is ready to send the data frame for communication, the MMS‑MDS module processes the TCP data frame and forwards it to the TX queue, STA_Air_TX The module sends TCP data frames to a wireless access point AP; an attacker RAP sends a deauthentication frame to the wireless client at a rate of λ2, and the STA_Air_RX module receives and checks the deauthentication frame and decides whether to forward it to the MMS queue Or directly discard it immediately; the STA_Air_RX module forwards it to the MDS queue after receiving a TCP-ACK; the MMS-MDS module completes the verification and deauthentication frame within the time S2. The invention can prevent the wireless local area network from the deauthentication and denial of service attack under low attack rate and high attack rate.