Detection and methods for handling a TDOS attack
AssigneeIntrado Life & Safety, Inc.
InventorCarleton A. Smith
Life of this patent
Estimating the term…
Abstract
A method includes receiving a first call; identifying a first telephone number associated with the first call; receiving a second call; identifying a second telephone number associated with the second call; determining to banish the second call, at least in part based the second telephone number and a determination that a number of calls associated with the first telephone number exceeds a predetermined threshold; and banishing the second call.
Claims20
A method, comprising:
- receiving a first call;
- identifying a first telephone number associated with the first call, wherein the first telephone number is a call back number for the first call;
- receiving a second call;
- identifying a second telephone number associated with the second call, wherein the second telephone number is a call back number for the second call;
- determining to banish the second call, at least in part based on the second telephone number and a determination that a number of calls associated with the first telephone number exceeds a predetermined threshold;
- and
- banishing the second call, wherein the banishing includes sending an error/cause code to a caller of the second call;
- recording a first ingress trunk group of the first call, at least in part based on the determination that the number of calls associated with the first telephone number exceeds the predetermined threshold;
- and
- determining whether the first telephone number matches the second telephone number, at least in part based on the first ingress trunk group and a second ingress trunk group of the second call.
An apparatus, comprising:
- a network interface that receives a first call and a second call;
- and
- a processor configured to identify a first telephone number associated with the first call, wherein the first telephone number is a call back number for the first call, to identify a second telephone number associated with the second call, wherein the second telephone number is a call back number for the second call, and to determine to banish the second call, at least in part based on the second telephone number and a determination that a number of calls associated with the first telephone number exceeds a predetermined threshold, wherein the second call is banished by sending an error/cause code to a caller of the second call, wherein the processor is further configured to record a first ingress trunk group of the first call, at least in part based on the determination that the number of calls associated with the first telephone number exceeds the predetermined threshold, and the processor is further configured to determine whether the first telephone number matches the second telephone number, at least in part based on the first ingress trunk group and a second ingress trunk group of the second call.
A computer-readable medium including instructions that, when executed by a processor, perform operations comprising:
- receiving a first call;
- identifying a first telephone number associated with the first call, wherein the first telephone number is a call back number for the first call;
- receiving a second call;
- identifying a second telephone number associated with the second call, wherein the second telephone number is a call back number for the second call;
- and determining to banish the second call, at least in part based on the second telephone number and a determination that a number of calls associated with the first telephone number exceeds a predetermined threshold, wherein the second call is banished by sending an error/cause code to a caller of the second call;
- recording a first ingress trunk group of the first call, at least in part based on the determination that the number of calls associated with the first telephone number exceeds the predetermined threshold;
- and
- determining whether the first telephone number matches the second telephone number, at least in part based on the first ingress trunk group and a second ingress trunk group of the second call.
Dependencies are inferred from the claim text.