Input Port Buffer for Denial of Service Attack Resistance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Denial of service attacks overwhelm computer systems by flooding them with illegitimate requests, preventing legitimate connections from being established due to resource consumption.
Innovation Solution
An input port system that uses a first-in, first-out buffer to prioritize and retain potentially authenticable requests from known devices, while discarding unknown requests, even when the buffer is full, allowing legitimate requests to be processed during an attack.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the buffer is filled with incoming requests to maintain system responsiveness, then the system can process legitimate requests, but denial of service attacks can overwhelm the buffer and consume system resources
Solution Approach 1:
The patent applies local quality by treating different requests differently based on their source. Known devices (those with previous connections) receive preferential treatment by being retained in the buffer even when full, while unknown devices are discarded. This differentiated approach allows the system to maintain productivity for legitimate users while resisting denial of service attacks from unknown sources.
Solution Approach 2:
The system performs preliminary action by maintaining a list of known devices based on previous connections. Before processing incoming requests during a denial of service attack, the system checks whether the request originates from a known device. This pre-established knowledge base enables rapid differentiation between legitimate and illegitimate requests without consuming extensive authentication resources.
2Reliability
If the system retains all incoming requests for authentication, then legitimate requests can be processed, but system resources are consumed during denial of service attacks
Solution Approach 1:
The patent extracts harmful requests from the authentication process by discarding requests from unknown devices before they consume authentication resources. Only requests from known devices are retained for authentication, effectively separating legitimate traffic from illegitimate traffic. This extraction prevents resource consumption by malicious requests while maintaining reliability for authenticated users.
3Productivity
If the buffer discards old requests when full, then new requests can be processed, but legitimate requests from known devices may be lost
Solution Approach 1:
The patent applies local quality by implementing different buffer management policies for different types of requests. When the buffer is full, requests from known devices are retained while requests from unknown devices are discarded. This selective retention ensures that new request processing capability is maintained for legitimate users without losing connections from authenticated devices.
Data Source
AI summary
An input port for a computer system may retain potentially authenticable requests for processing while removing other connection requests from an incoming queue or request pool. The input port may continue to receive new requests even during a denial of service attack, allowing potentially legitimate requests to be processed. In a typical embodiment, a first in, first out buffer may be used to receive and process connection requests. When the buffer is full, any request that comes from a device having a previous connection with the computer system may be retained for authentication, while removing requests that come from unknown devices. Some embodiments may retain a list of known devices associated with administrators or other known users, and the list may be updated as those users are authenticated.