Patent ID: 7889735
Filing Date: 2011-02-15
Classification: H04L

Abstract:
1. A fully automated method for defending against denial of service attacks against a target victim, the method implemented in one or more devices located in a packet based carrier network which provides packet based communication services to said target victim by transmitting IP packets thereto, the target victim not being located within said packet based carrier network and having one or more IP addresses associated therewith, the method comprising the steps of: receiving, at a device located in said packet based carrier network, an automated indication from said target victim alleging that a denial of service attack is being perpetrated thereupon, the denial of service attack comprising a plurality of malicious IP packets having been received by the target victim; receiving, at a device located in said packet based carrier network, from said target victim one or more pairs of IP addresses representative of IP packets whose transmission is to be limited, each of said pairs of IP addresses comprising a source IP address and a destination IP address, wherein the destination IP address is one of said IP addresses associated with the target victim; monitoring, at the one or more devices located in said packet based carrier network, IP packet traffic through at least a portion of the carrier network to identify IP packets having a source IP address and a destination IP address equal to the source IP address and the destination IP address comprised in one of said pairs of IP addresses received from said target victim; and limiting transmission within said packet based carrier network of said identified IP packets having a source IP address and a destination IP address equal to the source IP address and the destination IP address comprised in said one of said pairs of IP addresses received from said target victim and representative of IP packets whose transmission is to be limited.