US 11,876,831 B2
DDoS coping apparatus, DDoS coping method and program
Hiroaki Maeda, Tokyo (JP); Hisashi Kojima, Tokyo (JP); and Yoshiko Sueda, Tokyo (JP)
Assigned to Nippon Telegraph and Telephone Corporation, Tokyo (JP)
Appl. No. 16/968,984
Filed by Nippon Telegraph and Telephone Corporation, Tokyo (JP)
PCT Filed Feb. 12, 2019, PCT No. PCT/JP2019/004911
§ 371(c)(1), (2) Date Aug. 11, 2020,
PCT Pub. No. WO2019/159907, PCT Pub. Date Aug. 22, 2019.
Claims priority of application No. 2018-023388 (JP), filed on Feb. 13, 2018.
Prior Publication US 2021/0058427 A1, Feb. 25, 2021
Int. Cl. H04L 9/40 (2022.01); H04L 45/021 (2022.01)
CPC H04L 63/1458 (2013.01) [H04L 45/021 (2013.01); H04L 63/1416 (2013.01)] 12 Claims
OG exemplary drawing
 
1. A Distributed Denial of Service (DDoS) handling device configured to handle communication directed to a target of a DDoS attack flowing into one of a plurality of gateway devices of an autonomous system that serve as a plurality of connection points to adjacent autonomous systems and correspond to a plurality of mitigating locations for the DDoS attack, respectively, the DDoS handling device comprising:
a load distribution determination unit, including one or more processors, configured to determine whether or not to execute load distribution processing based on an amount of available resources at mitigating locations corresponding to the gateway device of the autonomous system into which the communication directed to the target flows and, if at least one attack has been detected, based further on an amount of the communication directed to the target;
a load distribution processing unit, including one or more processors, configured to select, from among the plurality of mitigating locations, mitigating locations to be used to handle the communication directed to the target to address shortages of resources between mitigating locations for each attack if the load distribution determination unit determines to execute the load distribution processing, wherein selecting the mitigation locations is performed to optimize a combination of (i) a first objective function that minimizes a difference between a maximum value and a minimum value of resource utilization rates at the respective mitigating locations and (ii) a second objective function that minimizes a number of communications directed to the target that is necessary to change from a current communication path; and
an attack handling setting unit, including one or more processors, configured to execute path control such that the communication directed to the target passes through the mitigating locations selected by the load distribution processing unit for each attack.