Patent ID: 8359648

Claim:
A method of defending against a Distributed Denial of Service (DDoS) attack, the method comprising: at an attack target server, determining whether the attack target server suffers a DDoS attack from a plurality of terminals, and according to a result of the determination by the attack target server, informing a control server that the attack target server suffers the DDoS attack by transmitting information of the attack target server to the control server; at the control server, confirming which of the plurality of terminals are transmitting data to the attack target server, and transmitting an attack prevention message to the plurality of confirmed terminals; and at each recipient terminal of the plurality of terminals that received the attack prevention message, determining whether the recipient terminal is participating in the DDoS attack and blocking the DDoS attack from the recipient terminal according to a result of the determination by the recipient terminal, wherein the determination by the recipient terminal comprises: in response to receiving the attack prevention message from the control server, determining whether the recipient terminal is transmitting data to the attack target server according to a command of a user of the recipient terminal, and in response to determining that the terminal is transmitting data to the attack target server independent of the command of the user, determining that the recipient terminal is participating in the DDoS attack.