Arbor Networks, Inc.

Marc R Eisenbarth

Lawrence Bruce Huston, Iii

Scott Iekel-Johnson

Aaron Campbell

Jose Oscar Nazario

Ellis Roland Dobbins

Alexandru G Bardas

Brian Moran

Jeff Edwards

A method and system for managing data traffic and protecting computing assets. The method and system includes intercepting queries and messages, such as EDNS0 queries, and sending probe queries and reply queries to the originating computing device to determine whether the originating computing device may be sufficiently validated so as to justify forwarding resource-intensive queries and messages to the targeted computing device.

Protecting computing assets from resource intensive querying attacks

A system, method and computer readable storage medium that receives traffic/packets from external devices attempting to access protected devices in a protected network. A determination is made to whether a received packet belongs to one of a plurality of packet classifications. Each packet classification indicative of different classes of IP traffic. Countermeasures are applied to a received packet to prevent attack upon the protected devices. Applying a countermeasure to a received packet determined to belong to one of the plurality of packet classifications includes countermeasure modification/selection contingent upon the determined packet classification for the received packet.

Adjusting DDoS protection based on traffic type

Growing community of inventors

Ann Arbor, MI, United States of America

Marc R Eisenbarth