Patent ID: 9742800
Date: 2017-08-22
CPC Classifications: H04L

Claim:
1. A method for mitigating distributed denial of service (DDoS) attacks, comprising: providing a distributed software defined networking (SDN) architectural solution to DDoS mitigation by decoupling a control plane and a data plane for DDoS attack mitigation, wherein functionality associated with the control plane is implemented within a DDoS attack mitigation central controller and includes adaptive, continuous estimation of behavioral thresholds based on past traffic and management of DDoS attack mitigation policies and wherein functionality associated with the data plane is implemented within and distributed among the plurality of DDoS mitigation appliances and includes collection of granular traffic rate information regarding traffic observed by each of the plurality of DDoS mitigation appliances; receiving, by a DDoS attack mitigation appliance of the plurality of DDoS attack mitigation appliances, the DDoS attack mitigation policies through a network connecting the DDoS attack mitigation central controller and the DDoS attack mitigation appliance; and mitigating a DDoS attack based on the received DDoS attack mitigation policies, wherein the DDoS attack mitigation policies are generated by the DDoS attack mitigation central controller based on granular behavioral packet rate thresholds estimated based on the granular traffic rate information collected at least from the DDoS attack mitigation appliance.