In a communication network, the responsiveness of the trans mission rate of data packets to
packet drops is quantified for an aggregate of flows as opposed to on a per-flow basis. In an …

An estimate of a portion of network traffic that is noncon forming to a communication
transmission control protocol is used to signal that a distributed denial of service attack may …

The invention provides methods, apparatus and systems for detecting distributed denial of
service (DDoS) attacks within the Internet by sampling packets at a point or points in Internet …

The invention provides methods, apparatus and Systems for detecting distributed denial of
service (DDoS) attacks within the Internet by Sampling packets at a point or points in Internet …

The invention detects a denial of service attack at a node by monitoring the number of
discarded packets in relationship to the number of inbound packets. When an attack is …

Abstract A Random Early Detection (RED) policer in accordance with the invention does not
tail-drop arriving packets as being non-conforming. For instance, because the RED policer …

Methods and apparatus for providing an Anti-Flooding Flow-Control (AFFC) mechanism
suitable for use in defending against flooding network Denial-of-Service (N-DoS) attacks is …

The present invention facilitates network throughput by dynamically generating IPG values,
which are employed when recovering from network collisions. Testing a number of IPG …

Embodiments are directed toward a method for Behavior based Tra? ic Differentiation (BTD)
that initially receives incoming packets and performs tra? ic classi? cation to deter mine the …

In a Denial-of-Service (DoS) attack, a victim network or server is flooded with a large Volume
of traffic, consuming critical system resources (bandwidth, CPU capacity, etc). The Internet …