Systems and methods for preventing, through machine learning and access filtering, distributed denial of service (“DDoS”) attacks originating from IoT devices

A private network architecture comprising:

• a plurality of electronic devices comprising one or more internet of things (“IoT”) devices and one or more non-IoT devices, each of the IoT devices and non-IoT devices supporting internet communication capabilities;
• a first filter associated with a network router, the first filter configured to:
• receive a plurality of simultaneous request messages, each request message associated with one of the plurality of electronic devices;
• and
• identify a device type for each of the plurality of electronic devices;
• filter the request message messages, the filtering comprising for each request message:
• when an electronic device associated with the request message is identified as a non-IoT type device, routing the request message through the non-IoT output channel;
• and
• when an electronic device associated with the request message is identified as an IoT type device, routing the request message through the IoT output channel;
• and
• a second filter associated with the web server, the second filter comprising an IP address filter gateway configured:
• grant device access to the web server when a request message is received through the non-IoT output channel;
• and
• deny device access to the web server when a request message is received through the IoT output channel;
• an internet service provider (“ISP”) configured to:
• receive the request message from the network router;
• when the request message is received from the non-IoT output channel, assign a non-IoT external IP address;
• and
• when the request message is received from the IoT output channel, assign an IoT external IP address;
• wherein:
• the IoT external IP address is determined at least in part by a subcategory associated with the IoT device, the subcategory identified based on a hardwired media access control address burned into a network interface card installed in the electronic device;
• and
• the second filter is configured to grant or deny a request based on the assigned external IP address.

A method for filtering internet traffic, the method classifying electronic devices, the classifying for segregating IoT devices from non-IoT devices for the prevention of distributed denial of services (“DDoS”) attacks, the method comprising:

• using a private network:
• receiving a request message from an electronic device within the private network;
• and
• identifying the type of the electronic device;
• using a first filter associated with a network router:
• routing the request message through the non-IoT output channel to a second filter comprising an IP address filter gateway when the electronic device is identified as a non-IoT type device;
• and
• routing the request message through the IoT output channel to the second filter when the electronic device is identified as an IoT type device;
• using the second filter associated with a web server:
• accepting a request for access to the web server when the request message is received through the non-IoT output channel;
• and
• rejecting a request for access to the web server when the request message is received through the IoT output channel;
• using an internet service provider (“ISP”):
• receive the request message from the network router;
• when the request message is received from the non-IoT output channel, assign a non-IoT external IP address;
• and
• when the request message is received from the IoT output channel, assign an IoT external IP address;
• wherein:
• the IoT external IP address is determined at least in part by a subcategory associated with the IoT device, the subcategory identified based on a hardwired media access control address burned into a network interface card installed in the electronic device;
• and
• the second filter is configured to grant or deny a request based on the assigned external IP address.