Unobtrusive and dynamic DDoS mitigation
US9954891B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | May 18, 2015 |
| Grant date | Apr 24, 2018 |
| Priority date | — |
| Expiry date | Feb 10, 2036 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L2463/144
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Some embodiments provide techniques for mitigating against layer 7 distributed denial of service attacks. Some embodiments submit a computational intensive problem, also referred to as a bot detection problem, in response to a user request. Bots that lack sophistication needed to render websites or are configured to not respond to the server response will be unable to provide a solution to the problem and their requests will therefore be denied. If the requesting user is a bot and has the sophisticated to correctly solve the problem, the server will monitor the user request rate. For subsequent requests from that same user, the server can increase the difficulty of the problem when the request rate exceeds different thresholds. In so doing, the problem consumes greater resources of the user, slowing the rate at which the user can submit subsequent requests, and thereby preventing the user from overwhelming the server.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.