Heuristic-Based Rejection of Computing Resource Requests

• US 20130159497A1
• Filed: 12/16/2011
• Published: 06/20/2013
• Est. Priority Date: 12/16/2011
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Mathur, Siddhartha, Butler, Michael Gene, Guo, Huangjian, Kholodov, Gleb, Sterling, David, Zhu, Zhengwen
• Application Number:
  US13/328,271
• Publication Number:
  US 20130159497A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2135 Metering

Abstract

A computing system includes an authentication layer, the authentication layer being programmed to receive a request for resources of the computing system and to authenticate an identity of a user requesting the resources, and a command layer, the command layer being programmed to execute one or more commands from the request for resources, wherein the command layer logs characteristics associated with one or more of the commands, wherein the computing system monitors each logged command to determine when a threshold is met, and wherein the computing system blocks a subsequent request for resources from the user when the threshold is met.

Claims

1. A computing system, comprising:

a processing unit; and

system memory encoding instructions that, when executed by the processing unit, create;

an authentication layer, the authentication layer being programmed to receive a request for resources of the computing system and to authenticate an identity of a user requesting the resources; and

a command layer, the command layer being programmed to execute one or more commands from the request for resources;

wherein the command layer logs characteristics associated with one or more of the commands;

wherein the computing system monitors each logged command to determine when a threshold is met; and

wherein the computing system blocks a subsequent request for resources from the user when the threshold is met.

2. The computing system of claim 1, wherein the command layer logs each failed command, the computing system monitors each failed command to determine when the threshold is met, and the authentication layer blocks the subsequent request for resources.

3. The computing system of claim 2, further comprising:

an authorization layer, the authorization layer being programmed to receive the request for resources of the computing system and to authorize the user to access the resources;

wherein the authorization layer logs each failed authorization.

4. The computing system of claim 3, wherein characteristics associated with the failed command and the failed authorization are stored in a repository.

5. The computing system of claim 4, wherein a blacklist is created based upon information in the repository.

6. The computing system of claim 5, wherein the blacklist includes at least one entry, the entry including characteristics associated with the user having exceeded the threshold.

7. The computing system of claim 2, wherein characteristics associated with the failed command are stored in a repository, and wherein a blacklist is created based on information in the repository.

8. The computing system of claim 7, wherein the blacklist includes at least one entry, the entry including characteristics associated with the user having exceeded the threshold, including at least a user identification.

9. The computing system of claim 7, wherein the blacklist is pushed to the authentication layer.

10. A method for throttling requests for resources, the method comprising:

receiving, by a computing device, a request for resources of a computing system;

processing, by the computing device, the request to identify a characteristic of the request for resources;

comparing the characteristic to a list;

when the characteristic is found on the list, blocking the request; and

when the characteristic is absent from the list, passing the request on for further processing.

11. The method of claim 10, wherein passing the request on for further processing includes authenticating an identity of a user making the request for resources.

12. The method of claim 11, wherein passing the request on for further processing includes providing access to the requested resources.

13. The method of claim 12, wherein passing the request on for further processing includes authorizing the user for access to the resources.

14. The method of claim 13, wherein passing the request on for further processing includes logging a failure while authorizing or providing access to the requested resources.

15. The method of claim 14, further comprising creating the list to include one or more characteristics associated with the failure.

16. The method of claim 15, further comprising identifying the characteristics to include a user identification of the user.

17. The method of claim 10, wherein the request is blocked prior to authentication of a user making the request.

18. The method of claim 17, wherein the request is blocked prior to authorization of the request or execution of the request.

19. A physical computer-readable storage medium encoding instructions that, when executed by a processing unit, cause the processing unit to perform steps including:

receiving, by a computing device, a request for resources of a computing system;

processing the request to identify a characteristic of the request for resources;

comparing the characteristic to a list;

when the characteristic is not found on the list;

authenticating an identity of a user making the request for resources;

authorizing the user for access to the resources;

providing access to the requested resources;

logging a failure while authorizing or providing access to the requested resources; and

creating the list to include one or more characteristics associated with the failure, the characteristics including a user identification of the user; and

when the characteristic is found on the list, blocking the request, the request being blocked prior to authentication or authorization of the user making the request.

20. The physical computer-readable storage medium of claim 19, wherein the request is blocked prior to execution of the request.