Amazon Technologies, Inc.

Bradford Sachin Chatterjee

Thomas Bradley Scholl

John E Shields

Kelly Anne Rooker

Kushal Mall

Darshan Narayana Reddy

Yao Liu

Dennis Marinus

Bobby Brown

Michael W Palladino

Eric Charles Briffa

Lewis Iain McLean

Grace Marie Hatamyar

Sidath Manawadu

Andrew Robert Hassall

Benjamin Patrick Albertson-Gass

Karthik Chandrashekar

Thomas William Bray

Christopher Jason Brown

Sasha Robbins

Ibn Wendell Archer

Cheng-Jia Lai

Madhura Kale

Matt Chung

Blake Hoelzel

A system can determine by which path/tunnel an Internet destination can be best reached for a user with an IP address from a static BGP range. The system looks up the destination address in an egress map. This map can either specify a tunnel that should be used for encapsulation for static BGP, or (when tunnel is not present) cause the system to send out unencapsulated traffic, in which the traffic follows normal BGP routing on a border network.

Routing for static border gateway protocol

The present disclosure generally relates to systems and methods for utilization of network mitigation techniques in the form of null address routing to mitigate coordinated DDOS attacks. One or more computing devices can install malware code into a network device after exploiting a vulnerability of the network device. A monitoring and mitigation service can monitor network devices and detect malware code installed on the network-based service. The monitoring and mitigation service can identify the internet protocol (IP) address or any routing information regarding the computing devices that sent the malware code. Based on the identified information, the monitoring and mitigation service can identify and implement the network mitigation information in the form of null routing addresses that will cause network communications associated with the identified computing device to be terminated or otherwise not delivered to the intended network-based resources.

Mitigation of malware code-distribution sites

The present disclosure generally relates to systems and methods for utilization of network mitigation techniques in the form of null address routing to mitigate coordinated DDOS attacks. A monitoring and mitigation service can characterize a command and control node as compromised or otherwise manipulated for purposes of generating distributed attacks. The monitoring and mitigation service can then identify network mitigation information in the form of null routing addresses that will cause network communications associated with the identified command and control node to be terminated or otherwise not delivered to the intended network-based resources. The monitoring and mitigation service can propagate the null routing address to routing components. The network mitigation information can be associated with expiration criteria for the routing components that receive and implement the network mitigation technique.

Managing network mitigation techniques

Growing community of inventors

Seattle, WA, United States of America

Bradford Sachin Chatterjee