A method and apparatus for responding to denial of service attacks. Rather than a firewall or other device either denying all new session requests or denying no new session requests (and, albeit, dropping then-pending session requests), new session requests are selectively passed to the device....http://www.google.com/patents/US6751668?utm_source=gb-gplus-sharePatent US6751668 - Denial-of-service attack blocking with selective passing and flexible monitoring
