Quarantine-based mitigation of effects of a local DoS attack
AssigneeCisco Technology, Inc.
InventorsJavier Cruz Mota, Jean-Philippe Vasseur, Andrea Di Pietro, Jonathan W. Hui
Life of this patent
Estimating the term…
Abstract
In one embodiment, techniques are shown and described relating to quarantine-based mitigation of effects of a local DoS attack. A management device may receive data indicating that one or more nodes in a shared-media communication network are under attack by an attacking node. The management device may then communicate a quarantine request packet to the one or more nodes under attack, the quarantine request packet providing instructions to the one or more nodes under attack to alter their frequency hopping schedule without allowing the attacking node to learn of the altered frequency hopping schedule.
Claims20
A method, comprising:
- receiving, at a management device, data indicating that one or more nodes in a shared-media communication network are under attack by an attacking node;
- and
- communicating a quarantine request packet to the one or more nodes under attack, the quarantine request packet providing instructions to the one or more nodes under attack to alter their frequency hopping schedule without allowing the attacking node to learn of the altered frequency hopping schedule by encrypting the frequency hopping schedule.
A method, comprising:
- receiving a quarantine request packet at a node in a shared-media communication network;
- altering, based on the quarantine request packet, a frequency hopping schedule of the node without allowing an attacking node to learn of the altered frequency hopping schedule by encrypting the frequency hopping schedule.
An apparatus, comprising:
- one or more network interfaces to communicate within a computer network;
- a processor coupled to the network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process executable by the processor, the process when executed operable to:
- receive, at a management device, data indicating that one or more nodes in a shared-media communication network are under attack by an attacking node;
- and
- communicate a quarantine request packet to the one or more nodes under attack, the quarantine request packet providing instructions to the one or more nodes under attack to alter their frequency hopping schedule without allowing the attacking node to learn of the altered frequency hopping schedule by encrypting the frequency hopping schedule.
Dependencies are inferred from the claim text.