Amazon Technologies, Inc.

Jeffrey Allen Lyon

John E Shields

Matthew Hyun Seok Lee

Krzysztof Jan Pado

Saket Tomer

Robert Benjamin Lang

Ben Sangho Jae

Adriana-Maria Horelu

A distributed denial of service attack is detected. In response to detection of the attack, application layer properties of network traffic associated with a web application under attack are analyzed. Changes to distributions of the application layer properties are identified. A signature is generated based, at least in part, on identifying a combination of application layer properties whose distributions have changed, and which identifies traffic increased since onset of the attack. A mitigation rule is generated based, at least in part, on the signature.

Automated attack mitigation

Growing community of inventors

Woodinville, WA, United States of America

Jeffrey Allen Lyon