SYSTEMS AND METHODS TO DETECT AND RESPOND TO DISTRIBUTED DENIAL OF SERVICE (DDoS) ATTACKS

A computer-implemented method for mitigating a distributed denial of service (DDoS) attack, comprising:

• receiving, by a server, a response message from an application server;
• determining, from a request message corresponding to the response message, a client identifier corresponding to a source client;
• locating, by the server, one or more counters corresponding to the source client, including a rolling window counter (RWC) that is used to track a number of total requests received from the source client, a discrete bad request counter (DBRC) that is used to track a number of bad requests received from the source client, a consecutive bad request counter (CBRC) that is used to track a number of consecutive bad requests received from the source client, or a combination thereof;
• identifying, by the server, a response type of the response message;
• determining, by the server, if the response message corresponds to a malicious request based on the response type and the client identifier;
• and
• causing a value of at least one of the one or more counters to change based on the determining if the response message corresponds to the malicious request.

A computer-implemented method for mitigating a distributed denial of service (DDoS) attack, comprising:

• receiving, by a server, a response message from an application server, wherein the response message is responsive to a request message from a client identifier;
• analyzing the response message using a response message filter to determine whether the request message is malicious;
• storing at least a portion of the request message in a data repository when the request message is determined to be malicious;
• comparing the request message against information stored in the data repository to determine whether the request message is part of a new attack pattern;
• and
• applying the attack pattern to a request message filter when the attack pattern is determined to be new.