ASTHMA & ALLERGY FOUNDATION OF AMERICA, INC Supports Research To Cure Asthma, Food Allergies, Anaphylaxis And Related Diseases; Providing Prevention Education For Adults And Kids; And Fighting For Patients' Rights · Noncommercial Research Organization
8201 Corporate Dr SUITE 1000, Hyattsville, MD 20785 1233 20 St SUITE 402, Washington, DC 20036 8201 Corporate Dr Suite 1000 SUITE 1000, Hyattsville, MD 20785 8007278462
Us Patents
Systems And Methods For Proactive Surge Protection
A system for protecting a network from a traffic surge includes a data collection module, an allocation module, and a traffic flow module. The data collection module is configured to obtain network utilization information for a plurality of traffic flows. The allocation module is configured to determine a bandwidth allocation to minimize a drop probability for the plurality of traffic flows. The traffic flow module is configured to preferentially drop network packets for a traffic flow exceeding the optimal bandwidth allocation.
Mitigating Low-Rate Denial-Of-Service Attacks In Packet-Switched Networks
Jia Wang - Randolph NJ, US Chia-Wei Chang - San Diego CA, US Seungjoon Lee - Basking Ridge NJ, US Bill Lin - La Jolla CA, US
Assignee:
AT&T Intellectual Property I, L.P. - Atlanta GA
International Classification:
G06F 11/00
US Classification:
726 23, 370401, 359167
Abstract:
A method includes determining, at a network routing device, an average packet drop rate for a plurality of aggregations of packet flows. The method also determines a threshold packet drop rate based on the average packet drop rate, a current packet drop rate for a select aggregation of the plurality of aggregations, and whether at least one packet flow of the select aggregation is potentially subject to a denial-of-service attack based on a comparison of the current packet drop rate to the threshold packet drop rate.
Oliver Spatscheck - Randolph NJ, US Bill Lin - La Jolla CA, US Jerry Chou - San Diego CA, US Subhabrata Sen - N. Providence NJ, US
Assignee:
AT&T CORP. - New York NY
International Classification:
H04L 12/24
US Classification:
370235
Abstract:
A system for protecting a network from a traffic surge includes a data collection module, an allocation module, and a traffic flow module. The data collection module is configured to obtain network utilization information for a plurality of traffic flows. The allocation module is configured to determine an optimal bandwidth allocation for each of the plurality of traffic flows. The traffic flow module is configured to preferentially drop network packets for a traffic flow exceeding the optimal bandwidth allocation.