Patent ID: 8966622
Filing Date: 2015-02-24
Classification: H04L

Abstract:
1. A computer-implemented method, comprising: receiving information indicative of a distributed denial of service attack on a victim; identifying one or more network conditions in connection with the distributed denial of service attack including determining one or more values for one or more members of the group consisting of: geographic distance and political jurisdiction; selecting, based at least in part on the identified one or more network conditions, one or more remotely deployed network points of presence of a plurality of remotely deployed network points of presence, the one or more remotely deployed network points of presence being geographically local to an attack origin of the distributed denial of service attack, the one or more remotely deployed network points of presence individually including a device that participates in a private channel communicatively coupled with the victim and that is located at a geographically remote location with respect to the victim; taking one or more actions that modify an addressing route for one or more internet protocol addresses of the victim to cause the one or more remotely deployed network points of presence to each receive at least a portion of redirected network traffic addressed to the victim; sending, to one or more remotely deployed network points of presence, instructions that cause the one or more remotely deployed network points of presence to each, at least: receiving, by the mitigation device, the first unblocked portion of the received network traffic addressed to the victim, which causes the mitigation device to, at least;