Anti-attack method, device and equipment based on congestion dissipation

CN122933244APending Publication Date: 2026-10-16CHINA TELECOM CORP LTD
0 Cites 0 Cited by

Patent Information

Application Number
CN202611328039.5
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-08-28
Publication Date
2026-10-16

AI Technical Summary

Technical Problem

[0003]相关技术下,在进行DDoS攻击防护过程中,可能在短时间内出现海量恶意请求涌向目标服务器,这样使目标服务器在高强度攻击下难以保持业务可用性,同时导致合法请求的延迟累积较长

Benefits of technology

[0016]In this embodiment, for upstream and downstream nodes of the cleaning domain, a first congestion state of the upstream node and a second congestion state of the downstream node are obtained. The cleaning domain includes multiple cleaning nodes. Based on the first and second congestion states, a congestion wave state is obtained. When the congestion wave state indicates that a congestion wave has formed downstream, peak shaving processing is performed on the first traffic rate of the upstream node to obtain the second traffic rate of the upstream node, so that the upstream node outputs service traffic according to the second traffic rate. The service traffic output by the upstream node is cleaned by multiple cleaning nodes, and the cleaned service traffic is output to the downstream node. Peak shaving processing is performed upstream to effectively suppress the impact of sudden traffic on the downstream cleaning nodes. Through the coordinated scheduling and timing optimization of multiple cleaning nodes, the cleaning effect is combined with user experience optimization, achieving a significant reduction in the latency of legitimate user access while maintaining a high interception rate.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

Embodiments of the present application provide a congestion dissipation-based attack prevention method, device and equipment, and relate to the technical field of Internet of Things. The method comprises: obtaining a first congestion state of an upstream node and a second congestion state of a downstream node of a cleaning domain; obtaining a congestion wave state based on the first congestion state and the second congestion state; performing peak clipping processing on a first traffic rate of the upstream node when the congestion wave state indicates that the downstream has formed a congestion wave, to obtain a second traffic rate of the upstream node, so that the upstream node outputs service traffic according to the second traffic rate; and cleaning the service traffic output by the upstream node through cleaning nodes in multiple cleaning domains, and outputting the cleaned service traffic to the downstream node. The traffic peak clipping processing in the upstream effectively suppresses the impact of burst traffic on the downstream cleaning nodes, and significantly reduces the access delay of legal users while maintaining a high interception rate.
Need to check novelty before this filing date? Find Prior Art