Patent ID: 7475141

Claim:
A method comprising: determining by a first network management device, separate and distinct from a first router of a network, whether the first router is meeting a service level for a first group of network traffic of the network serviced by the first router; and regulating a second group of network traffic of the network, also being serviced by said first router, by blocking the second group to assist the first router in meeting the service level for the first group of network traffic and nullify a denial of service attack involving the first router, the second group of network traffic being separate and distinct from said first group of network traffic; wherein said first group of network traffic comprises network traffic destined for/sourced from first one or more network nodes of said network, and said second group of network traffic comprises network traffic destined for/sourced from second one or more network nodes of said network that are separate and distinct from said first one or more network nodes.