System and Method to Detect and Mitigate Distributed Denial of Service Attacks using Random Internet Protocol Hopping

A system comprising:

• a proxy configured to:
• receive a first session request from a first client to a service address;
• send a first redirect instruction to the client indicating a first redirect address;
• determine that a first service interval has passed;
• receive, after the first service interval, a second session request from a second client to the service address;
• and
• send a second redirect instruction to the second client indicating a second redirect address;
• and
• a service host configured to:
• receive a third session request from the first client to the first redirect address;
• establish a first session with the first client in response to the third session request;
• determine that the first service interval has passed;
• receive, after the first service interval, a fourth session request from the second client to the second redirect address;
• establish a second session with the second client in response to the fourth session request;
• and
• receive, after the first service interval, a fifth session request from the third client to the first redirect address;
• and
• reject the fifth session request.

A non-volatile computer readable medium comprising a plurality of instructions to manipulate a processor, the plurality of instructions comprising:

• instructions to receive a first session request from a first client to a first redirect address;
• instructions to establish a first session with the first client in response to a first session request;
• instructions to receive a second session request from a second client to a second redirect address;
• instructions to determine the second session request was received after a first service interval has passed;
• instructions to establish a second session with the second client in response to the second session request;
• instructions to receive a third session request for content from a third client to the first redirect address;
• instructions to determine that the third session request was received after the first service interval has passed;
• and
• instructions to reject the third session request based on determining the third session request was received after the first service interval has passed.