ATE460803T1 - Verfahren und system zur abschwächung verteilter dienstverweigerungsangriffe auf grundlage einer schätzung der dichte der ip-nachbarschaft - Google Patents

Verfahren und system zur abschwächung verteilter dienstverweigerungsangriffe auf grundlage einer schätzung der dichte der ip-nachbarschaft

Info

Publication number
ATE460803T1
ATE460803T1 AT08154393T AT08154393T ATE460803T1 AT E460803 T1 ATE460803 T1 AT E460803T1 AT 08154393 T AT08154393 T AT 08154393T AT 08154393 T AT08154393 T AT 08154393T AT E460803 T1 ATE460803 T1 AT E460803T1
Authority
AT
Austria
Prior art keywords
histogram
sender
source
computer system
smoothed
Prior art date
Application number
AT08154393T
Other languages
English (en)
Inventor
Mehran Roshandel
Markus Goldstein
Matthias Reif
Armin Stahl
Thomas Breue
Original Assignee
Deutsche Telekom Ag
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Deutsche Telekom Ag filed Critical Deutsche Telekom Ag
Application granted granted Critical
Publication of ATE460803T1 publication Critical patent/ATE460803T1/de

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0236—Filtering by address, protocol, port number or service, e.g. IP-address or URL
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1458—Denial of Service
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/141—Denial of service attacks against endpoints in a network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)
  • Multi Processors (AREA)
AT08154393T 2008-04-11 2008-04-11 Verfahren und system zur abschwächung verteilter dienstverweigerungsangriffe auf grundlage einer schätzung der dichte der ip-nachbarschaft ATE460803T1 (de)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP08154393A EP2109282B1 (de) 2008-04-11 2008-04-11 Verfahren und System zur Abschwächung verteilter Dienstverweigerungsangriffe auf Grundlage einer Schätzung der Dichte der IP-Nachbarschaft

Publications (1)

Publication Number Publication Date
ATE460803T1 true ATE460803T1 (de) 2010-03-15

Family

ID=39671864

Family Applications (1)

Application Number Title Priority Date Filing Date
AT08154393T ATE460803T1 (de) 2008-04-11 2008-04-11 Verfahren und system zur abschwächung verteilter dienstverweigerungsangriffe auf grundlage einer schätzung der dichte der ip-nachbarschaft

Country Status (4)

Country Link
EP (1) EP2109282B1 (de)
AT (1) ATE460803T1 (de)
DE (1) DE602008000799D1 (de)
ES (1) ES2341144T3 (de)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102045331B (zh) * 2009-10-22 2014-01-22 成都市华为赛门铁克科技有限公司 查询请求报文处理方法、装置及系统
EP2712144A1 (de) 2010-09-24 2014-03-26 VeriSign, Inc. System und Verfahren zur Bewertung der IP-Adressen-Vertraulichkeit
US9392576B2 (en) 2010-12-29 2016-07-12 Motorola Solutions, Inc. Methods for tranporting a plurality of media streams over a shared MBMS bearer in a 3GPP compliant communication system
US8151341B1 (en) 2011-05-23 2012-04-03 Kaspersky Lab Zao System and method for reducing false positives during detection of network attacks
US10075467B2 (en) * 2014-11-26 2018-09-11 Verisign, Inc. Systems, devices, and methods for improved network security
CN109981656B (zh) * 2019-03-29 2021-03-19 成都知道创宇信息技术有限公司 一种基于cdn节点日志的cc防护方法
CN110474878B (zh) * 2019-07-17 2021-09-24 海南大学 基于动态阈值的DDoS攻击态势预警方法和服务器

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050249214A1 (en) * 2004-05-07 2005-11-10 Tao Peng System and process for managing network traffic
WO2006029399A2 (en) * 2004-09-09 2006-03-16 Avaya Technology Corp. Methods of and systems for network traffic security

Also Published As

Publication number Publication date
EP2109282A1 (de) 2009-10-14
EP2109282B1 (de) 2010-03-10
DE602008000799D1 (de) 2010-04-22
ES2341144T3 (es) 2010-06-15

Similar Documents

Publication Publication Date Title
ATE460803T1 (de) Verfahren und system zur abschwächung verteilter dienstverweigerungsangriffe auf grundlage einer schätzung der dichte der ip-nachbarschaft
WO2008091785A3 (en) System and method for determining data entropy to identify malware
TWI584148B (zh) Methods and devices for identifying user risks
DE602006001357D1 (de) Sicheres Verfahren zur Benachrichtigung einer Dienstbeendigung
IN2014DN06766A (de)
ATE551796T1 (de) Auf richtlinien basierendes management in einem kommunikationsnetz
RU2017101889A (ru) Система и способ обнаружения вредоносных программ с алгоритмом генерации доменных имен и систем, зараженных такими вредоносными программами
WO2012112944A3 (en) Managing unwanted communications using template generation and fingerprint comparison features
WO2005119945A3 (en) Optical line termination, optical access network, and method and apparatus for determining network termination type
GB2447390A (en) Hierarchical trust based posture reporting and policy enforcement
GB2529765A (en) Methods and systems for processing a DNS request
TW201640405A (zh) 網站攻擊防禦方法及裝置
WO2005114464A3 (en) System and method for providing remediation management
WO2007084973A3 (en) Network security system and method
ATE410875T1 (de) Verfahren zur zuordnung einer ip-adresse zu einem gerät
DE602006021224D1 (de) Verfahren zum schutz eines netzwerkdienstkontos, system und vorrichtung hierzu
WO2013003778A3 (en) Method and apparatus for determining and utilizing value of digital assets
WO2008063790A3 (en) Method and apparatus for efficient spectrum management in a communications network
ATE549814T1 (de) Verfahren zur reservierung von ressourcen, verfahren zur verarbeitung eines fehlers bei der vergebührung und policy-entscheidungspunkt
EP3851983A4 (de) Autorisierungsverfahren, hilfskomponente für autorisierung, verwaltungsserver und computerlesbares medium
US9917858B2 (en) Honey user
WO2011043557A3 (ko) 본인인증 장치 및 유비쿼터스 인증 관리 시스템
TW200502785A (en) Access management system, access management method, and computer-readable recording medium recording computer- executable program for causing computer to execute access management method
CN105337943A (zh) 一种物联网认证方法及物联网系统
EP3174263A1 (de) Vorrichtung und verfahren zur überprüfung von erkennungsregeln

Legal Events

Date Code Title Description
RER Ceased as to paragraph 5 lit. 3 law introducing patent treaties