Patent ID: 8719446
Filing Date: 2014-05-06
Classification: H04L

Abstract:
1. A method for defending a network, comprising: providing an alert to a route controller if more than a configurable amount of backbone network traffic comprises distributed denial of service traffic, wherein the alert is provided by utilizing instructions stored in memory and executed by a processor, wherein the backbone network traffic is addressed to a target; transmitting a portion of non-distributed denial of service traffic of the backbone traffic to the target without redirection to a scrubbing complex; redirecting a portion of the distributed denial of service traffic to the scrubbing complex to be scrubbed; transmitting scrubbed distributed denial of service traffic from the scrubbing complex to the target via a tunnel that prevents the scrubbed distributed denial of service traffic from being looped repeatedly through the scrubbing complex; and ranking a plurality of sources that are transmitting the distributed denial of service traffic to the target, wherein the sources are ranked at least in part based on an amount of traffic contributed by each source of the plurality of sources; providing feedback to the route controller, wherein the route controller adjusts the portion of the distributed denial of service traffic that is redirected to the scrubbing complex based on the feedback.