Patent ID: 11930037
Assignee: CHARTER COMMUNICATIONS OPERATING, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 11:
12. A networked computing system, the networked computing system comprising:
a first network comprising a first network-based device implemented using a first memory and at least one first processor, coupled to the first memory, and operative to perform operations comprising:
publishing a valid route origin authorization (ROA) for a specified IP address;
detecting a distributed denial-of-service (DDoS) attack to a given IP address; and
advertising a flowspec rule from a given autonomous system network to one or more neighboring autonomous system networks in response to the detection of the distributed denial-of-service (DDoS) attack; and

a second network comprising a second network-based device implemented using a second memory and at least one second processor, coupled to the second memory, and operative to perform operations comprising:
performing a modified Resource Public Key Infrastructure (RPKI) validation using the published valid route origin authorization (ROA) in response to the advertising of the flowspec rule, the advertising performed advertised in response to the detection of the distributed denial-of-service (DDoS) attack; and
implementing the flowspec rule to mitigate the distributed denial-of-service (DDoS) attack in response to a validation of the flowspec rule based on the performing the modified Resource Public Key Infrastructure (RPKI) validation.