Patent ID: 7278159

Claim:
A control system, comprising: a computer system to coordinate thwarting attacks on a data center that is coupled to a network the computer system comprising: a communication device, coupled to a physically separate network from the network that the data center is coupled to, to receive statistical data collected from network traffic flows collected by a plurality of monitors dispersed through the network that the data center is coupled to, with the monitors sending the statistical data collected from the network that the data center is coupled to over the physically separate network from the network that the plurality of monitors collect the statistical data from; with the computer system executing: a process to analyze the statistical data from the plurality of monitors to determine network traffic statistics that can identify malicious network traffic; a process to identify gateways on the monitoring network that are sources of malicious traffic destined for the data center; and a filtering process to eliminate the malicious traffic from entering the data center.