Patent ID: 7694338
Filing Date: 2010-04-06
Classification: H04L

Abstract:
1. A shared-tap based system associated with a service-provider network for detecting attacks that are directed toward one or more end-users of a communications network, the system comprising: at least one signal diverter coupled to at least one signal path in the service-provider network carrying communication signals to the end-users; and at least one detection apparatus coupled to the signal diverter in the service-provider network which monitors the communication signals for the presence of an attack signal directed toward one or more of the end-users, wherein the at least one signal diverter duplicates the communication signals and communicates the duplicated communication signals to the at least one detection apparatus, and wherein a total number of detection apparatuses is determined according to a bandwidth capability for each one of the detection apparatuses and a respective allotted bandwidth for each of the end-users; wherein the total number of detection apparatuses is determined by: a respective allotted bandwidth for each of the end-users; a total number of end-users for each of the respective allotted bandwidths; a plurality of bandwidth multiplicity factors, wherein each of the plurality of bandwidth multiplicity factors is determined by a multiplication of the respective allotted bandwidth for each of the end-users times the total number of end-users for each of the respective allotted bandwidths; a bandwidth summation, determined by a combined total of all of the plurality of bandwidth multiplicity factors; and the total number of detection apparatuses, determined by the bandwidth summation, per a desired centralized detector apparatus bandwidth.