Amazon Technologies, Inc.

Saket Tomer

John E Shields

Matthew Hyun Seok Lee

Krzysztof Jan Pado

Robert Benjamin Lang

Jeffrey Allen Lyon

Ben Sangho Jae

Adriana-Maria Horelu

A distributed denial of service attack is detected. In response to detection of the attack, application layer properties of network traffic associated with a web application under attack are analyzed. Changes to distributions of the application layer properties are identified. A signature is generated based, at least in part, on identifying a combination of application layer properties whose distributions have changed, and which identifies traffic increased since onset of the attack. A mitigation rule is generated based, at least in part, on the signature.

Automated attack mitigation

Growing community of inventors

Burnaby, Canada

Saket Tomer