Arbor Networks, Inc.

Chester Kustarz

Lawrence Bruce Huston, Iii

James Edward Winquist

Eric S Jackson

Christopher R Hand

Olan Patrick Barnes

James A Simpson

Kevin Russell Cline

A method to mitigate attack by an upstream service provider using cloud mitigation services. An edge detection device, which located at the subscriber's network edge, is able to communicate information via status messages about attacks to an upstream service provider. The service provider is then able to mitigate attacks based on the status messages. There is a feedback loop whereby the amount of dropped traffic by the service provider is added to the network traffic to keep the mitigation request open and prevent flapping. Likewise, the detection device includes time-to-engage and time-to-disengage timers to further prevent flapping.

System and method for denial of service attack mitigation using cloud services

A system and methods for mitigation slow HTTP, SSL/HTTPS, SMTP, and/or SIP attacks. A protection system monitors each TCP connection between a client and a server. The protection system monitors the header request time and minimum transfer rate for each client and TCP connection. If the client has not completed the data transfer in the minimum time or the data are not transferred at the minimum transfer rate, the protection system determines the connections are potentially a slow attack and resets the connections for the protected devices.

Method and protection system for mitigating slow HTTP attacks using rate and time monitoring

Growing community of inventors

Ann Arbor, MI, United States of America

Chester Kustarz