Patent ID: 9628509
Date: 2017-04-18
CPC Classifications: G06F,H04L

Claim:
1. A method in a cloud-based proxy service for identifying a target of a denial-of-service (DoS) attack, the method comprising: determining that there is traffic indicative of the DoS attack directed to an IP address of the cloud-based proxy service; responsive to determining that there are a plurality of domains that resolve to that same IP address, identifying the one of the plurality of domains that is the target of the DoS attack, wherein the step of identifying includes performing the following: after identifying the target of the DoS attack, isolating the target of the DoS attack to a set of one or more data centers, wherein a set of one or more other domains that are not the target of the DoS attack initially belong to the set of data centers; and moving that set of other domains to a different set of one or more data centers after identifying the target of the DoS attack.