Patent ID: 11916956
Assignee: RADWARE LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 13:
14. A system for generating dynamic applicative signatures by application layer flood attack tools, comprising:
a processing circuitry; and
a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
determine a plurality of different attributes of requests received during an on-going DDoS attack;
cluster at least one attribute of the plurality of different attributes, wherein the clustering is based on values of the plurality of different attributes;
determine clusters of attributes representing most frequent structures of the requests received during the on-going DDoS attack; and
generate, based on the determined clusters of attributes, signature of an application layer flood attack tool executing the on-going DDoS attack, wherein the application layer flood attack tool generates application layer requests having legitimate structures and content including random values.