System and Method for Avoiding and Mitigating a DDoS Attack
OwnerJacobus Van der Merweinventor
Life of this patent
Estimating the term…
Abstract
Described is a system and method for receiving a data packet including a destination address and a source address, categorizing the data packet into a community based on the source address, wherein the community is predefined by a user corresponding to the destination address and selecting a treatment for the data packet based on the community. The method may be implemented on a router to avoid and/or mitigate the harmful effects of a Distributed Denial of Service (“DDoS”) attack on a computer system or network.
Claims21
-23. (canceled)
A non-transitory computer-readable storage medium storing a set of instructions executable by a processor, the set of instructions performing a method comprising:
- selecting Internet Protocol (“IP”) prefixes for a community from a list of IP prefixes, the list being ranked by a most recent attack related to each of the IP prefixes on the list;
- storing a per-customer table for the community based on a destination address;
- receiving a data packet including the destination address and a source address;
- categorizing the data packet into the community based on the source address;
- and
- selecting a treatment for the data packet based on the community.
A router, comprising:
- a memory storing a set of computer readable instructions, a routing table that includes a correspondence between a plurality of communities and source addresses, and a plurality of per-customer tables having each community predefined by a user corresponding to destination addresses, the predefining of each community comprises selecting Internet Protocol (“IP”) prefixes for each community from a list of IP prefixes, the list being ranked by a most recent attack related to each of the IP prefixes on the list;
- and
- a processor executing the set of computer readable instructions to perform a method comprising,
- categorizing each of a plurality of received data packet into one of the plurality of communities based on the source address of each data packet and the routing table,
- selecting a treatment for each data packet based on the destination address of each data packet and a selected per-customer table.
A method, comprising:
- receiving, from a service provider, a list of IP prefixes, the list being ranked by a most recent attack related to each of the IP prefixes;
- selecting one or more IP prefixes from the list;
- generating a per-customer table using the selected one or more IP prefixes, wherein the per-customer table includes a community corresponding to each of the one or more IP prefixes;
- and
- sending the per-customer table to the service provider.
Dependencies are inferred from the claim text.