Arbor Networks, Inc.

Jose Oscar Nazario

Dug Song

Lawrence Bruce Huston, Iii

Scott Iekel-Johnson

Aaron Campbell

Thomas Henry Ptacek

Marc R Eisenbarth

Jeff Edwards

Jeffrey Edwards

Brian Moran

A method and system for authenticating IP source addresses by accessing one or more HTTP requests whose source client identifies itself as a legitimate web crawler. One or more IP addresses are detected from the one or more HTTP requests and each detected IP address is authenticated via a probability estimation regarding its association with a legitimate web crawler. A lookup table is preferably compiled for the authenticated IP addresses for reference, publication and authentication purposes.

Authentication of IP source addresses

A system, method and computer readable storage medium that receives traffic/packets from external devices attempting to access protected devices in a protected network. A determination is made to whether a received packet belongs to one of a plurality of packet classifications. Each packet classification indicative of different classes of IP traffic. Countermeasures are applied to a received packet to prevent attack upon the protected devices. Applying a countermeasure to a received packet determined to belong to one of the plurality of packet classifications includes countermeasure modification/selection contingent upon the determined packet classification for the received packet.

Adjusting DDoS protection based on traffic type

Technique for protecting a communications network, such a computer network, from attack such as self-propagating code violations of security policies, in which the network is divided into 'compartments' that are separated by access control devices such as firewalls. The access control devices are then used to stop the spread of self-propagating attack code, the 'zero-day' worms, for example. However, the access control devices are configured such that upon activation legitimate in-use network services will not be jeopardized.

Method and system for reducing scope of self-propagating attack code in network

Growing community of inventors

Ann Arbor, MI, United States of America

Jose Oscar Nazario