Techniques for reducing the time to mitigate of DDoS attacks

A system for reducing a time to mitigate future attacks that are part of an on-going distributed denial of service (DDoS) campaign, comprising:

• a processing circuitry;
• and
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• receive a plurality of attack feeds on at least one protected object in a secured environment;
• analyze the plurality of attack feeds to determine characteristics of an on-going DDoS attack campaign comprising multiple attacks that take place over time against the secured environment, at least one of the multiple attacks of the on-going DDoS attack campaign starting at a time in the future relative to at least one other one of the multiple attacks of the on-going DDoS attack campaign;
• determine a set of optimal mitigation resources assigned to the secured environment;
• select, based on the set of optimal mitigation resources and the on-going DDoS attack campaign characteristics, at least one optimal workflow scheme;
• and
• initiate a proactive mitigation action to mitigate a predicted future attack of the on-going DDoS attack campaign by setting each mitigation resource in the set of optimal mitigation resources according to the selected optimal workflow scheme.