Arbor Networks, Inc.

Eric S Jackson

Dug Song

Lawrence Bruce Huston, Iii

James Edward Winquist

Gerald R Malan

Lawrence Benjamin Fleis

Aidan Christopher Dysart

Andrew David Mortensen

William M Northway, Jr

Ronald G Hay

Olan Patrick Barnes

Chester Kustarz

Brett Higgins

Alex Levine

James A Simpson

A method for encoding domain name information into flow records includes receiving a flow record. The flow record includes initial network flow information in a standard flow record format including at least a source address and a destination address. Domain name information associated with each of the source address and destination address is retrieved from a database. The domain name information is encoded into the received flow record while maintaining the initial network flow information to yield an enhanced flow record.

Augmenting network flow with passive DNS information

A method to mitigate attack by an upstream service provider using cloud mitigation services. An edge detection device, which located at the subscriber's network edge, is able to communicate information via status messages about attacks to an upstream service provider. The service provider is then able to mitigate attacks based on the status messages. There is a feedback loop whereby the amount of dropped traffic by the service provider is added to the network traffic to keep the mitigation request open and prevent flapping. Likewise, the detection device includes time-to-engage and time-to-disengage timers to further prevent flapping.

System and method for denial of service attack mitigation using cloud services

A system and method are provided for monitoring traffic in an enterprise network. Similar hosts may be grouped using flow information. Network policy may then be created at the group level based on the signatures of the hosts and groups of hosts in the enterprise. Hosts may be arranged in hierarchical clusters. Some of these clusters may be selected as groups based on a desired degree of similarity between hosts in a group. The similarity between hosts may be determined based on similarity of network behavior of the hosts.

System and method for managing computer networks

Growing community of inventors

Ann Arbor, MI, United States of America

Eric S Jackson