Architecture to thwart denial of service attacks
AssigneeRiverbed Technology, Inc.
InventorsMassimiliano Antonio Poletto, Anne Elizabeth Dudfield
Life of this patent
Estimating the term…
Abstract
A monitoring device is disposed to thwart denial of service attacks on a data center. The monitoring device is a device that collects statistical information on packets that are sent between a network and the data center for a plurality of customers by examining traffic as if the device was disposed on links that are downstream from links that the provisioned monitor is disposed on.
Claims33
A monitoring device disposed for thwarting denial of service attacks on a data center, the monitoring device comprising:
- a device that collects statistical information on packets that are sent between a network and the data center for a plurality of customers by examining traffic as if the device was disposed on links that are downstream from links that the provisioned monitor is disposed on.
A method of thwarting denial of service attacks on a victim data center coupled to a network comprises:
- collecting statistical information on packets that are sent between a network and a plurality of customers of the data center by examining traffic as if the device was disposed on links that are downstream from links that the provisioned monitor is disposed on;
- and
- communicating data, over a dedicated network, to a control center.
An arrangement disposed to monitor a link between a data center and a network for thwarting denial of service attacks on the data center, the arrangement comprising:
- a provisioned monitor that collects statistical information for a plurality of provisioned customers, which are on links that are downstream from links that the provisioned monitor is disposed on, the provisioned monitor maintaining separate counter logs for each provisioned customer;
- and
- a global counter log that accounts for all traffic seen on the link that the provisioned montior is coupled to.
A method of thwarting denial of service attacks on a victim data center coupled to a network comprises:
- collecting statistical information for a plurality of provisioned customers on links that are downstream from links on which collecting occurs;
- and
- maintaining separate counter logs for each provisioned customer;
- and a global counter log that accounts for all traffic seen on the links on which collecting occurs.
A method of thwarting denial of service attacks on a victim data center coupled to a network comprises:
- collecting statistical information for a plurality of links that are downstream from links on which collecting occurs;
- performing traffic analysis on the collected statistical information on a per downstream link basis to identify malicious traffic;
- and communicating alerts that arise from the traffic analysis.
Dependencies are inferred from the claim text.