Amazon Technologies, Inc.

Matthew Hyun Seok Lee

John E Shields

Ben Sangho Jae

Saket Tomer

Robert Benjamin Lang

Jeffrey Allen Lyon

Krzysztof Jan Pado

Adriana-Maria Horelu

A distributed denial of service attack is detected. In response to detection of the attack, application layer properties of network traffic associated with a web application under attack are analyzed. Changes to distributions of the application layer properties are identified. A signature is generated based, at least in part, on identifying a combination of application layer properties whose distributions have changed, and which identifies traffic increased since onset of the attack. A mitigation rule is generated based, at least in part, on the signature.

Automated attack mitigation

Growing community of inventors

Vancouver, Canada

Matthew Hyun Seok Lee