Title:
ATTACK DEFENSE METHOD, DEVICE AND SYSTEM
Document Type and Number:
WIPO Patent Application WO/2023/142493
Kind Code:
A1
Abstract:
The present application discloses an attack defense method, a device and a system. Addresses in a protected network are divided into multiple address ranges, comprising a first address range and a second address range. The first address range is a proper subset of the second address range, or the second address range is a proper subset of the first address range. A protection device, or a server connected to the protection device, is able to calculate statistics of first traffic flowing through the protection device, to obtain a first traffic statistical value. When the first traffic statistical value exceeds a first threshold, the protection device performs defense processing on the first traffic, the first traffic being traffic of a target type whose destination address is the first address range. The first address range and the second address range are address ranges having different granularities. Therefore, statistics of traffic of destination addresses belonging to address ranges having various granularities can be flexibly calculated , so that a DDoS attack targeting the address ranges having various granularities is effectively detected, and the defense effect of the protection device is improved.
Inventors:
WU BO (CN)
Application Number:
PCT/CN2022/118344
Publication Date:
August 03, 2023
Filing Date:
September 13, 2022
Export Citation:
Assignee:
HUAWEI TECH CO LTD (CN)
International Classes:
H04L9/40
Foreign References:
| CN112134845A | 2020-12-25 | |||
| CN101540761A | 2009-09-23 | |||
| CN107689967A | 2018-02-13 | |||
| CN111224924A | 2020-06-02 | |||
| CN106161333A | 2016-11-23 | |||
| US10237875B1 | 2019-03-19 | |||
| CN202210103362A | 2022-01-27 |
Attorney, Agent or Firm:
SHENPAT INTELLECTUAL PROPERTY AGENCY (CN)
Download PDF: