Network accountability among autonomous systems
AssigneeMicrosoft Corporation
InventorsDaniel R. Simon, Sharad Agarwal, David A. Maltz
Life of this patent
Estimating the term…
Abstract
In one kind of DoS attack, malicious customers may try to send a large number of filter requests against an innocent customer. In one implementation, a Filter Request Server (FRS) may allow a customer against who a filter request is made to dispute the implicit accusation of the filter request or stop sending malicious traffic. If the customer claims innocence, the FRS may log destination addresses of data packets sent by the customer and identify and ignore false filter requests if these filter requests come from customers who do not correspond to one or more of the destination addresses that have previously been logged by the FRS.
Claims20
A method comprising:
- under control of one or more processors configured with executable instructions:
- logging one or more destination addresses of data packets that have been sent from a sending customer;
- receiving a filter request made by a receiving customer to filter new data packets sent from the sending customer to the receiving customer;
- determining whether the receiving customer corresponds to one of the one or more logged destination addresses of the data packets that have been sent from the sending customer;
- and
- determining, based on the determining, whether to filter the new data packets sent from the sending customer to the receiving customer or to ignore the received filter request made by the receiving customer.
One or more computer-readable media storing computer-executable instructions that, when executed by one or more processors, configure the one or more processors to perform acts comprising:
- receiving a filter request from a receiving customer to filter data packets sent from a sending customer;
- allowing the sending customer to file a dispute with the filter request of the receiving customer;
- and
- determining whether to filter the data packets sent from the sending customer or to ignore the filter request of the receiving customer based on a result of the dispute.
A system comprising:
- one or more processors;
- memory, communicatively coupled to the one or more processors, storing computer-executable instructions that, when executed by the one or more processors, configure the one or more processors to perform acts comprising:
- logging one or more destination addresses of data packets that have been sent from a sending customer;
- receiving a filter request made by a receiving customer to filter new data packets sent from the sending customer to the receiving customer;
- determining whether the receiving customer corresponds to one of the one or more logged destination addresses of the data packets that have been sent from the sending customer;
- and
- determining whether to filter the new data packets sent from the sending customer to the receiving customer or to ignore the received filter request made by the receiving customer based on the determining.
Dependencies are inferred from the claim text.