Traffic segmentation in prevention of DDoS attacks

Patent metadata

Field	Value
Publication number	US-8959631-B2
Application number	US-201213720110-A
Country	US
Kind code	B2
Filing date	Dec 19, 2012
Priority date	Dec 19, 2012
Publication date	Feb 17, 2015
Grant date	Feb 17, 2015

Abstract

Systems, methods, and computer storage media for traffic segmentation in prevention of DDoS attacks are provided. Data associated with one or more users of a particular service or network is collected. Legitimate properties associated with the data are identified. In embodiments, the legitimate properties are shared with one or more related services. One or more requests are received for the service or related services and request properties are identified. The legitimacy of the one or more requests is predicted based on a comparison of the legitimate and request properties.

First claim

What is claimed is:

1. Computer storage media having computer-executable instructions embodied thereon, that when executed by one or more computing devices, cause the one or more computing devices to perform a method of utilizing internet protocol (IP) traffic segmentation to prevent distributed denial of service (DDoS) attacks, the method comprising:
collecting data from one or more legitimate users on a network;
identifying legitimate properties associated with the data, the l…

Assignees

• Microsoft Corp

Inventors

• Beryozkin Genady

Classifications

• H04L63/1425

  Electricity · mapped topic

• H04L63/1458 Primary

  Electricity · mapped topic