Abstract: In a system for detecting and optionally blocking packets from an attacker, an improved multi-hash process, in which rate information for one or more packet signatures is computed by individual modules, where each module corresponds to a different hash function, and is shared across the modules to determine maximum observed rates for the signatures within a specified observation window. A moving average of the maximum rates can be computed across several observation windows, to optimize false negative and false positive detections. The modules may designate certain packets as potentially harmful and/or may block such packets, according to a corresponding maximum rate and specified threshold.

Abstract: A Dynamic Adaptive Machine (DAM) classifies a received packet into a packet group and selects an initial level of processing for that group based on, at least in part, a measure of load of the system for processing the packet. The DAM continues to monitor the system load and re-computes the load measure, and increases or decreases the processing level according to the load measure. The DAM considers one or more processing states and, after an increase in the processing level, ignores for a certain grace period any errors generated at the higher level of processing, to minimize false positive errors.

Abstract: An interface description language (IDL) compiler generates a descriptor for invoking a method implemented by a software component or a target unit by source units, where the descriptor customizes the invocation by one or more source units based on, at least in part, whether a respective source unit and the target unit are mapped to the same core or to different cores, as specified by a unit-core map. Additionally or in the alternative, the invocation may depend on whether the method is synchronous, asynchronous, or unspecified. Using the unit-core map, a channel associated with a method may be monitored efficiently by avoiding monitoring of the source units that are mapped to the same core as the target unit is.