The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Nov. 25, 2025

Filed:

Nov. 29, 2023
Applicant:

Radware Ltd., Tel Aviv, IL;

Inventors:

Lev Medvedovsky, Netanya, IL;

Gabi Nakibly, Tel Aviv, IL;

David Aviv, Tel Aviv, IL;

Assignee:

Radware Ltd., Tel Aviv, IL;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G08B 21/18 (2006.01); H04L 69/22 (2022.01); H04W 8/00 (2009.01);
U.S. Cl.
CPC ...
H04L 63/1458 (2013.01); G08B 21/182 (2013.01); H04L 63/1408 (2013.01); H04L 69/22 (2013.01); H04W 8/005 (2013.01);
Abstract

A method and system for detecting a denial of service (DoS) attack when packets used in the DoS attack are user datagram protocol (UDP) packets, are disclosed. The method includes obtaining values from an application header of a UDP packet; and when, based on use of at least one modified probabilistic Bloom filter (PMBF) for a destination to which the UDP packet indicates that it is destined, the obtained values are not values expected to be found in a UDP packet destined for the destination: increasing an uncommon per sample (ups) estimate for the PMBF; and when the increased uncommon per sample estimate is greater than an upper ups threshold: setting an alarm state to on; suspending update of the PMBF counters; and initiating a mitigation action at least with respect to the UDP packet.


Find Patent Forward Citations

Loading…