Back to results
US 8,913,493 B2Granted
Obtaining and using confidence metric statistics to identify denial-of-service attacks
AssigneeVerizon Patent and Licensing Inc.
InventorJeffrey Allen Haltom
Life of this patent
Estimating the term…
Abstract
A system may receive data collected by a network for a plurality of calls that are to be routed by the network to a call center, detect an event based on the received data, determine a confidence level, for the event, that the event is a denial-of-service attack, determine a call service to be provided to the call center in response to detecting the event, and provide the call service based on the confidence level.
Claims20
A method comprising:
- receiving data collected by a network for calls that are to be routed by the network to a call center;
- detecting, by a network device, an event based on the received data;
- determining a confidence level, for the event, that the event is a denial-of-service attack;
- identifying a plurality of calls associated with the event;
- dropping one or more calls, of the plurality of calls associated with the event, when the confidence level is above a first threshold;
- testing at least one call, of the plurality of calls associated with the event, when the confidence level is less than or equal to the first threshold and greater than a second threshold;
- and
- routing the plurality of calls associated with the event to the call center when the confidence level is less than or equal to the second threshold.
5 more elements
A device comprising:
- a network interface for the device to communicate with other devices in a network;
- a memory to include instructions;
- a processor to execute the instructions to:
- receive data collected, by one or more devices in a network, for calls that are to be forwarded by the network to a call center;
- detect an event based on the received data;
- determine a confidence level, for the event, that the event is a denial-of-service attack;
- identify a plurality of calls associated with the event;
- drop one or more calls, of the plurality of calls associated with the event, when the confidence level is above a first threshold;
- test at least one call, of the plurality of calls associated with the event, when the confidence level is less than or equal to the first threshold and greater than a second threshold;
- and
- forward the plurality of calls associated with the event when the confidence level is less than or equal to the second threshold.
8 more elements
A non-transitory computer-readable medium comprising computer executable instructions that, when executed by a processor, cause the processor to:
- receive data collected by a network for calls that are to be directed by the network to a call center;
- detect an event based on the received data;
- compute a confidence level, for the event, that the event is a denial-of-service attack;
- identify a plurality of calls associated with the event;
- drop one or more calls, of the plurality of calls associated with the event, when the confidence level is above a first threshold;
- test at least one call, of the plurality of calls associated with the event, when the confidence level is less than or equal to the first threshold and greater than a second threshold;
- and
- direct the plurality of calls associated with the event to the call center when the confidence level is less than or equal to the second threshold.
5 more elements
Dependencies are inferred from the claim text.