Patent ID: 8276203
Filing Date: 2012-09-25
Classification: H04L

Abstract:
1. A method for mitigating a denial of service attack in a subscriber network comprising: monitoring upstream packets in a region of the subscriber network using a traffic monitor; detecting excess upstream packets directed to a port in the region of the subscriber network using the traffic monitor, wherein the port is identified by a port number; obtaining by the traffic monitor an identifier of a subscriber device identified as a source of the excess upstream packets, wherein the subscriber device is connected to the subscriber network via one of a plurality of regional cable modem termination systems (CMTSs); reporting the subscriber device identifier to a national policy server; applying by the national policy server a policy to the identifier of the subscriber device, wherein the policy limits the upstream bandwidth for upstream packets originating from the subscriber device directed to the port number; reporting the policy, the port number and the identifier of the subscriber device to regional policy server, wherein the regional policy server is in communication with the plurality of regional CMTSs; identifying by the regional policy server the one of the plurality of regional CMTSs to which the subscriber device identified by the identifier is connected; reporting by the regional policy server the policy to the identified one of the plurality of regional CMTSs: and enforcing by the one of the plurality of regional CMTSs the policy against the identifier of the subscriber device.