METHOD OF PROTECTING COMPUTER NETWORKS FROM UNAUTHORISED SCANNING AND BLOCKING OF NETWORK SERVICES (VERSIONS) Russian patent published in 2012 - IPC G06F21/00 

FIELD: information technology.

SUBSTANCE: objective is achieved by detecting and preprocessing at a firewall set up at the input of a secure computer network, input fragmented network packets containing a request for establishing a connection with a node (server) on the secure computer network, allocating for this purpose a separate pre-cyclic buffer, as well as a separate cyclic buffer for holding the fragmented packets coming from the same sender. Thus, the disclosed method (versions) enables to block computer attacks of the type of a "storm" of false requests for establishing connection, aimed at wasting resources of secure nodes (servers), realised by fragmenting network packets, which increases the level of security of computer networks using firewalls.

EFFECT: high level of security of computer networks using firewalls.

3 cl, 4 dwg