Ddos defence in a packet-switched network
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorsArindam BANERJEE, Shivashankar SUBRAMANIAN
Life of this patent
Estimating the term…
Abstract
A method, network system and computer storage medium for DDoS defence in a packet-switched network are provided. The method is performed by a network system and includes: measuring a plurality of network parameters in incoming network traffic; ranking the plurality of measured network parameters based on machine learning; measuring a subset of the plurality of network parameters in incoming network traffic; determining an incoming network packet to be part of a DDoS attack or not by machine learning of the subset of the plurality of network parameters; and blocking an incoming network packet when the incoming network packet is determined to be part of a DDoS attack.
Claims21
A method for DDoS defence in a packet-switched network, the method being performed by a network system the method comprising:
- measuring a plurality of network parameters in incoming network traffic;
- ranking the plurality of measured network parameters based on machine learning;
- measuring a subset of the plurality of network parameters in incoming network traffic;
- determining whether an incoming network packet is part of a DDoS attack by machine learning of the subset of the plurality of network parameters;
- and
- blocking an incoming network packet when the incoming network packet is determined to be part of a DDoS attack.
A network system for DDoS defence in a packet-switched network, the network system comprising:
- a processor;
- and
- a computer storage medium storing instructions that, when executed by the processor, causes the network system to:
- measure a plurality of network parameters in incoming network traffic;
- rank the plurality of measured network parameters based on machine learning;
- measure a subset of the plurality of network parameters in incoming network traffic;
- determine whether an incoming network packet is part of a DDoS attack by machine learning of the subset of the plurality of network parameters;
- and
- block an incoming network packet when the incoming network packet is determined to be part of a DDoS attack.
(canceled)
A network system for DDoS defence in a packet-switched network, the network system comprising:
- a measurement manager configured to measure a plurality of network parameters in incoming network traffic, and to measure a subset of the plurality of network parameters in incoming network traffic;
- a ranking manager configured to rank the plurality of measured network parameters based on machine learning;
- a determination manager configured to determine whether an incoming network packet is part of a DDoS attack by machine learning of the subset of the plurality of network parameters;
- and
- a traffic manager configured to block an incoming network packet when the incoming network packet is determined to be part of a DDoS attack.
A computer storage device storing a computer program for DDoS defence in a packet-switched network, the computer program comprising computer program code which, when run on a processor of a network system in the packed-switched network, causes the network system to:
- measure a plurality of network parameters in incoming network traffic;
- rank the plurality of measured network parameters based on machine learning;
- measure a subset of the plurality of network parameters in incoming network traffic;
- determine whether an incoming network packet is part of a DDoS attack by machine learning of the subset of the plurality of network parameters;
- and
- block an incoming network packet when the incoming network packet is determined to be part of a DDoS attack.
(canceled)
Dependencies are inferred from the claim text.