Nippon Telegraph and Telephone Corporation

Yuichi Sudo

Takahiro Hamada

Bo Hu

Hideo Kitazume

Yuminobu Igarashi

Yuichi Murata

Masami Ueno

When an attack is detected, a controller samples an attack-target addressed DNS reply, received by a border router, from each of the border routers. Then, the controller adds the transmission-source IP address of the sampled DNS reply to the black list of the border router. Furthermore, upon reception of any of a target-addressed DNS reply and a target-addressed UDP subsequent fragment from the IP address that is described in the black list, the controller gives a command to the border router to discard the packet. Furthermore, the controller specifies the setting, for each of the border routers, that DNS replies to a DNS request from the target are excluded from discarding.

Growing community of inventors

Musashino, Japan

Yuichi Sudo