Protection against network-initiated attacks

Abstract

The title of the invention is protection against network-initiated attacks. Examples described herein relate to a computing system that changes an operating frequency of a peripheral device interface between a network interface card and a processor based on detecting a traffic violation. In some examples, the frequency of operation of a peripheral device interface is reduced based on detecting a traffic violation. In some examples, the IP packet fragments may include one or more of the following: IP packet fragments that are incomplete packets, too small IP packet fragments, IP packet fragments that result in excessive packets, or a full IP packet fragmentation buffer. In some examples, detecting traffic violations is based on detecting IP packet fragments at one or more of the following locations: a network appliance, a network interface card, a non-core, a system agent, an operating system, an application, or a computing platform. In some examples, a peripheral device interface includes one or more of the following: a system agent, a non-core, a bus, a device interface, and a cache. In some examples, the peripheral device interface is part of a system on chip (SoC), and the SoC further includes one or more of the following: a core, a system agent, or a non-core.

Description

Background technique [0001] Network functions (NFs) and virtual network functions (VNFs) that perform high-speed data plane and signaling processing can flood the network with traffic, causing VNFs to become overloaded and virtualized applications to become congested and unresponsive. Sources of network flooding may include signaling storms generated in the network. Handling signaling storms requires high computing resources, which can cause processors to become overloaded and unavailable for other work. Some sources of network flooding can include malicious network attack vectors, including denial of service (DoS) attacks utilizing fragmentation attacks and buffer-based attacks, as well as distributed versions of these types of attacks (e.g., distributed denial of service (DDoS) ). Contents of the invention [0002] This application discloses a group of technical solutions, as follows: [0003] Technical scheme 1. A method, comprising: [0004] An operating frequency of...

AI Technical Summary

Problems solved by technology

Handling signaling storms requires high computing resources, which can cause the processor to become overloaded and unavailable for other work

Images