Methods for mitigating network attacks through client partitioning and devices thereof
AssigneeF5 Networks, Inc.
InventorsSaxon Amdahl, Peter Finkelshtein, Maxim Zavodchik, Ron Talmor
Life of this patent
Estimating the term…
Loading patent…
AssigneeF5 Networks, Inc.
InventorsSaxon Amdahl, Peter Finkelshtein, Maxim Zavodchik, Ron Talmor
Estimating the term…
Methods, non-transitory computer readable media, application security management apparatuses, and network traffic management systems that obtain a reputation score for a client. A server is selected based on the reputation score and a session is established with the server. Interaction(s) with an application hosted by the server are monitored. The reputation score for the client is updated based on the interaction(s). A remote fingerprint database and client-side scripts and cookies can be used to obtain reputation scores generated in different domain(s). With this technology, reputations scores are used to direct sessions for relatively benign clients and relatively malicious clients to different server devices so that if the relatively malicious clients conduct a successful attack, only a subset of the servers will be unavailable, and the relatively benign clients will still have access to application(s) hosted by another subset of servers unaffected by the attack.
A method for mitigating attacks through client partitioning implemented by a network traffic management system comprising one or more application security management apparatuses, server devices, or client devices, the method comprising:
An application security management apparatus, comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
A non-transitory computer readable medium having stored thereon instructions for mitigating attacks through client partitioning comprising machine executable code which when executed by one or more processors, causes the processors to:
A network traffic management system, comprising one or more application security management apparatuses, server devices, or client devices, the network traffic management system comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
Dependencies are inferred from the claim text.