Method and system for detecting failure-causing client with failure handling edge server grouping

Abstract

Provided is a client terminal access control method, and the method includes: allocating a communication process of a first client group comprising a plurality of client terminals to an edge server; when a failure occurs in an operation of the edge server, allocating a communication process of a second client group comprising at least one client terminal belonging to the first client group to a failure-handling edge server; and determining whether a failure occurs in an operation of the failure-handling edge serve.

Description

BACKGROUND OF THE DISCLOSUREField of the disclosure[0001]The present disclosure relates to detection of a client causing a network failure and, more particularly, to a method and a system for detecting a failure-causing client with failure-handling edge server grouping to detect a failure-causing client, which causes a network failure, through grouping of failure-handling edge servers.Related Art[0002]Detecting a network failure-causing client using a client route control system, for example, identifying an Internet Protocol (IP) of a distributed denial-of-service (DDoS) attacker may refer to designating an edge server to be accessed by a user using several edge servers, a client route control server, and a domain name server (DNS) to detect and identify a DDoS attack by controlling a client route.[0003]DDoS attacks may be generally classified into two types. The first-type DDoS attack may paralyze the server by burdening the server with an excessive load. When such an attack occurs...

AI Technical Summary

Benefits of technology

The present disclosure describes a method and system for detecting a failure-causing client that causes network failures and ensures the continuity of service provided to clients. By identifying the failure-causing client and replacing the failure edge server and failure-handling edge server with failure-handling edge server sub-groups, it is possible to easily block a DDoS attack and prevent a user who is normally using a service from being affected. The method is efficient and cost-effective as it can detect and block various types of DDoS attacks. Additionally, the system administrator can adaptively manage the configurations of the edge server and failure-handling edge server according to the network environment. Overall, the method provides a fast and stable detection environment for failure-causing clients.

Problems solved by technology

The first-type DDoS attack may paralyze the server by burdening the server with an excessive load.

When such an attack occurs, the server may be paralyzed by failing to process other jobs due to an excessive load thereon.

That is, even if there is no problem with the server, a problem may happen in the network, so it may be difficult to maintain a service.

Despite many DDoS security technologies developed to address the above-described situation, none of them is considered a permanent solution.

Although the conventional DDoS security technologies are capable of blocking a DDoS attack, but it is not possible to search for and identify the IP of a DDoS attacker.

In addition, if an attacked line or IP range is blocked in order to block a DDoS attack, even a normal user belonging to the corresponding line or range may not use a service.

This may cause a time loss and an excessive cost in financial institutions, public institutions, and service providers, such as game service providers, that should continuously maintain a service 24 hours a day.

When there is a single client that causes a network failure, the above-described related art relating to a method for detecting a failure-causing client using a client route control system has no difference compared to the present disclosure; however, the related art has a possibility that false detection can happen when a network failure occurs in several clients simultaneously.

When a failure occurs in the operation of the failure-handling edge server and there is a single client terminal allocated to the failure-handling edge server, the processor may determine the single client terminal as a failure-causing client terminal.

This means that it is not possible for a DDoS attacker to directly interfere with the server, so it is not possible to carry out a DDoS attack directly on the server.

Images