Patent ID: 9118707
Filing Date: 2015-08-25
Classification: H04L

Abstract:
1. A method comprising: identifying, by an attack traffic mitigation system, a range of ports left open by a firewall for a network element to receive, by way of the firewall, network traffic provided by a computing device; designating, by the attack traffic mitigation system, a subset of one or more ports included in the range of open ports as being included in a legitimate port range configured to receive, by way of the firewall, legitimate network traffic provided by the computing device; removing, by the attack traffic mitigation system after a predetermined amount of time subsequent to the subset of one or more ports being designated as being included in the legitimate port range, the subset of one or more ports from being included in the legitimate port range; designating, by the attack traffic mitigation system, a new subset of one or more ports included in the range of open ports as being included in the legitimate port range, wherein the new subset of one or more ports includes at least one port not included in the subset of one or more ports; and directing, by the attack traffic mitigation system, the network element to drop network traffic provided by the computing device and received by each port included in the range of open ports that is not included in the legitimate port range at a time that the network traffic is received, wherein the designating of the subset of one or more ports as being included in the legitimate port range and the designating of the new subset of one or more ports as being included in the legitimate port range each comprises negotiating with the computing device to select the one or more ports for inclusion in the legitimate port range.