Patent ID: 9369477
Filing Date: 2016-06-14
CPC Classification: H04L

Claim Text:
1. A method executed at least in part on a computing device to mitigate a convergence attack in a network, the method comprising: receiving average time to live (TTL) values of one or more data packets from multiple nodes in a portion of the network, wherein the multiple nodes are interconnected by links in a closed configuration; detecting a path-based convergence attack in response to a determination that the average TTL values of the one or more data packets are substantially decreased over the multiple nodes; identifying one or more potential attack links causing the attack in the network portion to generate a list from the identified potential attack links, iterating the list across the one or more potential attack links to gather traffic statistics of the network portion; determining one or more attack links based on the gathered traffic statistics of the network portion; and enforcing data traffic throttling by employing on-flow rate throttling to limit user-specific increases in traffic flow provided to the one or more attack links to mitigate the attack.