Method, network device, and network system for defending distributed denial of service attack
OwnerHongxing Liinventor
Life of this patent
Estimating the term…
Abstract
A method for defending a distributed denial of service (“DDoS”) attack includes analyzing at least one of a running status of a server or a network data stream flowing to the server at the server side to detect whether a DDoS attack occurs on the server and notifying a data stream cleaner that the data stream cleaner needs to clean the network data stream flowing to the server, if the DDoS attack occurs on the server.
Claims10
A method for defending a distributed denial of service (DDoS) attack, comprising
- analyzing at least one of a running status of a server or a network data stream flowing to the server at the server side, to detect whether a DDoS attack occurs on the server;
- and
- notifying a data stream cleaner that the data stream cleaner needs to clean the network data stream flowing to the server if a DDoS attack occurs on the server.
A network device comprising a distributed denial of service (DDoS) attack defending module, wherein the DDoS attack defending module comprises:
- a detecting unit, configured to analyze at least one of a running status of the network device or a network data stream flowing to the network device at the network-device side to detect whether a DDoS attack occurs on the network device;
- and
- a notifying unit, configured to notify a data stream cleaner that the data stream cleaner needs to clean the network data stream flowing to the network device if the detecting unit detects that the DDoS attack occurs on the network device.
A network system comprising at least one network device and a data stream cleaner, wherein:
- the network device is configured to:
- receive and process a network data stream from a network side where the network device comprises a distributed denial of service (DDoS) attack defending module configured to analyze at least one of a running status of the network device or the network data stream flowing to the network device to detect whether a DDoS attack occurs on the network device, and
- notify the data stream cleaner that the data stream cleaner needs to clean the network data stream flowing to the network device if the DDoS attack occurs on the network device;
- and
- the data stream cleaner is configured to negotiate with the network device and clean the network data stream according to a negotiation result.
Dependencies are inferred from the claim text.