Patent ID: 8510826
Filing Date: 2013-08-13
Classification: H04L

Abstract:
1. A computer system having a processor and a memory, the computer system operable to execute a method for providing a service provider-independent on-demand distributed denial of service (DDoS) mitigation, the method comprising: creating a baseline of normal internet protocol (IP) traffic for a customer wherein the baseline is an ideal or model traffic pattern of a normal traffic behavior of the customer generated from normal IP traffic that is sent to and from the customer; building a customer profile from the baseline to load into a set of mitigation devices prior to a DDoS attack, wherein the customer profile includes information that identifies the model traffic pattern for normal IP traffic for the customer; loading the customer profile into the set of mitigation devices; activating the customer profile in one or more subsets of the set of mitigation devices when a DDoS attack occurs; implementing one or more protocol configurations in one or more routers to route the IP traffic to the one or more subsets of the set of mitigation devices; and filtering the IP traffic of a set of DDoS packets based on the customer profile, wherein filtering the IP traffic comprises comparing the IP traffic to the customer profile, determining if one or more members of the IP traffic exceed a limit for a normal traffic pattern for the customer, and if the limit is exceeded, removing the one or more members; and routing the IP traffic that is filtered to the customer.