Amazon Technologies, Inc.

Robert Benjamin Lang

John E Shields

Matthew Hyun Seok Lee

Krzysztof Jan Pado

Saket Tomer

Jeffrey Allen Lyon

Ben Sangho Jae

Adriana-Maria Horelu

A distributed denial of service attack is detected. In response to detection of the attack, application layer properties of network traffic associated with a web application under attack are analyzed. Changes to distributions of the application layer properties are identified. A signature is generated based, at least in part, on identifying a combination of application layer properties whose distributions have changed, and which identifies traffic increased since onset of the attack. A mitigation rule is generated based, at least in part, on the signature.

Automated attack mitigation

Growing community of inventors

Richmond, Canada

Robert Benjamin Lang