Arbor Networks, Inc.

Ryan O'Reilly

William M Northway, Jr

Chris Thiele

A computer-implemented method and system for managing and configuring flow specification (FlowSpec) messages for a customer network by a controller device coupled to the customer network. Network traffic is monitored by the controller device flowing through the customer network detect a network attack in the customer network. The controller device enables a network user to configure a Flowspec message responsive to the detected network attack. The controller device preferably enables the network user to either 1) manually configure a FlowSpec message or 2) configure a Flowspec message utilizing one or more pre-existing FlowSpec rulesets preferably defined for that customer network. The controller device then enables the network user to either 1) display to the network user the mitigation actions to be performed by the configured Flowspec message and save the configured Flowspec message in a data repository without announcement of the configured Flowspec message to the customer network; or 2) announce the configured Flowspec message to the customer network and save the configured Flowspec message in a data repository responsive to selection by the network user.

Growing community of inventors

Ann Arbor, MI, United States of America

Ryan O'Reilly