System and method for protecting against denial of service attacks
View Patent ↗A system and method is disclosed for protecting a receiver configured to receive a plurality of contemporaneous spread spectrum signal bursts from a denial of service attack. The method includes the operation of detecting a burst transmission that includes a random burst number. The burst transmission can be analyzed to determine a denial of service statistic based on the random burst number. The burst transmission is processed when the denial of service statistic is within a predetermined threshold.
1. A method for protecting a receiver from a denial of service attack wherein the receiver is configured to receive a plurality of contemporaneous spread spectrum signal bursts, the method comprising:
detecting a burst transmission with the receiver, wherein the burst transmission is a spread spectrum signal burst and includes a random burst number;
analyzing the burst transmission with the receiver to determine a denial of service statistic based on the random burst number; and
processing the burst transmission with the receiver when the denial of service statistic is within a predetermined threshold.
2. A method as in claim 1 , wherein detecting a burst transmission further comprises detecting a burst transmission that includes a pseudo-random burst number.
3. A method as in claim 1 , wherein detecting a burst transmission further comprises detecting a burst transmission that includes a burst number located after a synch signal.
4. A method as in claim 1 , further comprising determining the denial of service statistic based on a possible range of the random burst number.
5. A method as in claim 1 , further comprising determining the denial of service statistic based on a potential number of the contemporaneous spread spectrum signal bursts that will be received within a predetermined period.
6. A method as in claim 5 , further comprising setting the denial of service statistic at such a level that when more than two contemporaneous spread spectrum signal bursts having a matching burst number are received over a three second window, then subsequent bursts having the matching burst number will be inhibited from being assigned to a burst receiver.
7. A method as in claim 1 , further comprising detecting a burst transmission using an accumulated cross product search engine configured to detect a presence and frequency offset of the burst transmission.
8. A method as in claim 7 , further comprising de-rotating the burst transmission, wherein the burst transmission is de-rotated based on the frequency offset.
9. A method as in claim 1 , further comprising inhibiting a burst receiver from being assigned a selected burst when the denial of service statistic is outside the predetermined threshold.
10. A method as in claim 1 , further comprising assigning a burst receiver to a detected burst for a sufficient time for the burst receiver to identify the burst number and de-assigning the burst receiver if the denial of service statistic is outside the predetermined threshold.
11. A method as in claim 1 , further comprising determining the burst number within the burst transmission using a sliding correlator.
12. A method as in claim 1 , further comprising determining the burst number within the burst transmission using a matched filter correlator.
13. A method as in claim 1 , further comprising encoding the burst number with a forward error correction block code to encode the burst number.
14. A method as in claim 1 , wherein the random burst number is a randomly selected number for each spread spectrum signal burst.
15. A system for protecting a receiver from a denial of service attack wherein the receiver is configured to receive a plurality of contemporaneous spread spectrum burst signals, the spread spectrum burst signals comprising a random burst number located in each spread spectrum signal burst, the system comprising:
a component code despreader configured to despread at least one component code of each spread spectrum signal burst to form a signal burst;
a burst number decoder configured to recognize a pattern in the signal burst, wherein the pattern is related to the random burst number; and
a microprocessor configured to compare the pattern to previously received patterns to form a denial of service statistic and send the signal burst to the receiver when the denial of service statistic is within a predetermined threshold.
16. A system as in claim 15 , further comprising an accumulated cross product search engine configured to detect the plurality of contemporaneous spread spectrum signal bursts and to measure a frequency offset of the signal burst relative to a frequency reference at the receiver.
17. A system as in claim 16 , further comprising a frequency shifter configured to de-rotate the signal burst by the frequency offset.
18. A system as in claim 15 , wherein the burst number decoder further comprises a sync detector configured to detect a sync signal in the signal burst.
19. A system as in claim 18 , wherein the burst number decoder further comprises a pattern detector configured to recognize the pattern related to the random burst number in each signal burst upon detection of the sync signal.
20. A system as in claim 19 , wherein the pattern detector further comprises an error correction code decoder configured to remove a block forward error correction code from the burst number to form a decoded burst number signal.
21. A system as in claim 19 , wherein the pattern detector further comprises a differential pattern detector configured to determine changes between samples of the signal burst to provide a differential pattern for each burst number.
22. A system as in claim 19 , wherein the pattern detector further comprises a differential correlator configured to determine changes between samples of the signal burst to provide a differential pattern for each burst number.
23. A system as in claim 15 , wherein the random burst number is a pseudorandom burst number.
24. A system as in claim 15 , wherein the random burst number is a randomly selected number for each spread spectrum signal burst.
25. A receiver for receiving a plurality of contemporaneous spread spectrum signal bursts while protected from a denial of service attack, the receiver comprising:
a detection means for detecting a burst transmission, wherein the burst transmission is a spread spectrum signal burst and comprises a random burst number;
an analyzing means for analyzing the burst transmission to determine a denial of service statistic based on the random burst number; and
a processing means for processing the burst transmission when the denial of service statistic is within a predetermined threshold.
26. A receiver as in claim 25 , wherein the random burst number is a randomly selected number for each spread spectrum signal burst.