专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11563772B2 Detection and mitigation DDoS attacks performed over QUIC communication protocol 有权
公开(公告)号：US11563772B2
公开(公告)日：2023-01-24
申请号：US16731441
申请日：2019-12-31
申请人： RADWARE, LTD.
发明人： Ehud Doron , David Aviv , Eyal Rundstein , Lev Medvedovsky
IPC分类号： H04L9/40 , H04L43/062 , H04L43/067 , H04L43/0876 , H04L43/16
摘要： A method and system for protecting against quick UDP Internet connection (QUIC) based denial-of-service (DDoS) attacks. The system comprises extracting traffic features from at least traffic directed to a protected entity, wherein the traffic features demonstrate behavior of QUIC user datagram protocol (UDP) traffic directed to the protected entity, wherein the extract traffic features include at least one rate-base feature and at least one rate-invariant feature, and wherein the at least traffic includes QUIC packets; computing at least one baseline for each of the at least one rate-base feature and the at least one rate-invariant feature; and analyzing real-time samples of traffic directed to the protected entity to detect a deviation from each of the at least one computed baseline, wherein the deviation is indicative of a detected QUIC DDoS attack; and causing execution of at least one mitigation action when an indication of the detected QUIC DDoS attack is determined.

2. 发明授权

US11290374B2 Multi-layer traffic steering for service chaining over software defined networks 有权
公开(公告)号：US11290374B2
公开(公告)日：2022-03-29
申请号：US14743229
申请日：2015-06-18
申请人： RADWARE, LTD.
发明人： Benny Rochwerger , David Aviv
IPC分类号： G06F15/16 , H04L45/00 , H04L47/24 , H04L45/30 , H04L47/2475 , H04L47/2425
摘要： A method and system for multi-layer traffic steering for enabling service chaining over a software defined network (SDN) are provided. The method is performed by a central controller of the SDN and includes receiving at least one service chaining rule defining at least one value-added service (VAS) to assign to an incoming traffic flow addressed to a destination server; analyzing each of the at least one received service chaining rule to determine if an application-layer steering is required; generating at least one application-layer steering rule, upon determining that an application-layer steering is required; generating at least one network-layer steering rule, upon determining that an application-layer steering is not required; and programming a multi-layer steering fabric with the generated at least one of network-layer steering rule and application-layer steering rule.

3. 发明授权

US10951648B2 Techniques for protecting against excessive utilization of cloud services 有权
公开(公告)号：US10951648B2
公开(公告)日：2021-03-16
申请号：US15940360
申请日：2018-03-29
申请人： RADWARE, LTD.
发明人： Ehud Doron , Nir Ilani , David Aviv , Yotam Ben Ezra , Amit Bismut
IPC分类号： H04L29/06 , G06N5/04 , H04L12/803 , G06N20/00
摘要： A method, system and a platform for protecting against excessive utilization of at least one cloud service for operation of a cloud-hosted application. The method comprising receiving, at a defense platform deployed out-of-path of traffic between a plurality of end user devices and the cloud-hosted application, telemetries from a plurality of sources, wherein each source is configured to collect telemetries related to at least one of the at least one cloud service; detecting, based on the collected telemetries and a learned normal utilization behavior for the cloud-hosted application, excessive utilization of at least one of the at least one cloud service by the cloud-hosted application; and causing mitigation, at the defense platform, of the excessive utilization of each cloud service upon detection of the excessive utilization of the at least one cloud service by the cloud-hosted application.

4. 发明授权

US11606387B2 Techniques for reducing the time to mitigate of DDoS attacks 有权
公开(公告)号：US11606387B2
公开(公告)日：2023-03-14
申请号：US16227912
申请日：2018-12-20
申请人： RADWARE, LTD.
发明人： Ehud Doron , Yotam Ben Ezra , David Aviv
IPC分类号： H04L9/40 , G06N20/00
摘要： A system and method for reducing a time to mitigate distributed denial of service (DDoS) attacks are provided. The method includes receiving a plurality of attack feeds on at least one protected object in a secured environment; analyzing the plurality of attack feeds to determine characteristics of a DDoS attack against the secure environment; determining a set of optimal mitigation resources assigned to the secured environment; selecting, based on the set of optimal mitigation resources and the attack characteristics, at least one optimal workflow scheme; and initiating a proactive mitigation action by setting each mitigation resource in the set of optimal mitigation resources according to the selected optimal workflow scheme.

5. 发明授权

US11552989B1 Techniques for generating signatures characterizing advanced application layer flood attack tools 有权
公开(公告)号：US11552989B1
公开(公告)日：2023-01-10
申请号：US17456329
申请日：2021-11-23
申请人： RADWARE LTD.
发明人： Ehud Doron , Koral Haham , David Aviv
IPC分类号： H04L9/40
摘要： A method and system for characterizing application layer flood denial-of-service (DDoS) attacks carried by advanced application layer flood attack tools. The method comprises receiving an indication on an on-going DDoS attack directed toward a protected entity; analyzing requests received during the on-going DDoS attack to determine a plurality of different attributes of the received requests; generating a dynamic applicative multi-paraphrase signature by clustering at least one value of the plurality of different attributes, wherein the multi-paraphrase signature characterizes requests with different attributes as generated by an advanced application layer flood attack tool executing the on-going DDoS attack; and characterizing each incoming request based on the multi-paraphrase signature, wherein the characterization provides an indication for each incoming request whether a request is generated by the attack tool.

6. 发明授权

US11363044B2 Method and system for detecting and mitigating HTTPS flood attacks 有权
公开(公告)号：US11363044B2
公开(公告)日：2022-06-14
申请号：US16453035
申请日：2019-06-26
申请人： RADWARE, LTD.
发明人： Ehud Doron , Lev Medvedovsky , David Aviv , Eyal Rundstein , Ronit Lubitch Greenberg , Avishay Balderman
IPC分类号： H04L29/06 , H04L9/40
摘要： A method for detecting hypertext transfer protocol secure (HTTPS) flood denial-of-service (DDoS) attacks. The method estimating traffic telemetries of at least ingress traffic directed to a protected entity; providing at least one rate-base feature and at least one rate-invariant feature based on the estimated traffic telemetries, wherein the rate-base feature and the rate-invariant feature demonstrate a normal behavior of HTTPS traffic directed to the protected entity; evaluating the at least one rate-base feature and the at least one rate-invariant feature with respect to at least one baseline to determine whether the behavior of the at least HTTPS traffic indicates a potential HTTPS flood DDoS attack; and causing execution of a mitigation action when an indication of a potential HTTPS flood DDoS attack is determined.

7. 发明授权

US10924484B2 Method for determining a cost to allow a blockchain-based admission to a protected entity 有权
公开(公告)号：US10924484B2
公开(公告)日：2021-02-16
申请号：US15994434
申请日：2018-05-31
申请人： RADWARE, LTD.
发明人： Alon Lelcuk , David Aviv
IPC分类号： H04L29/06 , G06Q20/38 , H04L9/06 , H04L9/32
摘要： A method and system for determining a cost to allow a blockchain-based admission to a protected entity. The method includes identifying, in a blockchain network, a conversion transaction identifying a conversion of a first-type of access tokens with access tokens of a second-type, wherein the transaction designates at least the protected entity; determining a conversion value for converting the first-type of access tokens into the second-type access tokens, wherein the conversion value is determined based on at least one access parameter; and converting, based on the determined conversion value, a first sum of the first-type access tokens into a second sum of the second-type access-tokens, wherein a client spends the second sum of the second-type access tokens to access the protected entity, the determined conversion value is the access cost to the protected entity.

8. 发明授权

US10200382B2 System and method for detecting abnormal traffic behavior using infinite decaying clusters 有权
公开(公告)号：US10200382B2
公开(公告)日：2019-02-05
申请号：US14933353
申请日：2015-11-05
申请人： RADWARE, LTD.
发明人： Lev Medvedovsky , David Aviv
IPC分类号： H04L29/06
摘要： A system and method for detecting abnormal traffic behavior. The method comprises: applying a task to an input data set to create an un-normalized cluster of traffic features, wherein the task defines a plurality of traffic features; computing a center point of the cluster of traffic features; computing a distance between the computed center point and a new sample, wherein the new sample includes traffic features defined in the task; and determining, based on the computed distance, whether the received new sample demonstrates abnormal behavior.

9. 发明授权

US10129297B2 System and method thereof for multi-tiered mitigation of cyber-attacks 有权
公开(公告)号：US10129297B2
公开(公告)日：2018-11-13
申请号：US15707292
申请日：2017-09-18
申请人： RADWARE, LTD.
发明人： Ehud Doron , David Aviv , Yotam Ben Ezra , Lev Medvedovsky
IPC分类号： H04L29/06 , H04L12/911
摘要： A method and system for controlling multi-tiered mitigation of cyber-attacks. The method comprises monitoring at least availability and load of each protection resource in a multi-tiered communication network, wherein each tier in the multi-tiered communication network includes a plurality of protection resources having capacity and security capabilities set according to the respective tier; for each protection resource, computing a current aggregated load metric (ALM); determining based on at least one of the computed ALM and security capabilities of a respective protection resource, if the respective protection resource assigned to a protected entity can efficiently handle a detected cyber-attack against the protected entity; and selecting at least one new protection resource to secure the protected entity, upon determining the protection resource cannot efficiently handle the detected cyber-attack, wherein the selection is based on at least one of the computed ALM and a security capabilities of the at least one protection resource.

10. 发明授权

US09130977B2 Techniques for separating the processing of clients' traffic to different zones 有权
标题翻译：将客户流量处理分离到不同区域的技术
公开(公告)号：US09130977B2
公开(公告)日：2015-09-08
申请号：US13744030
申请日：2013-01-17
申请人： Radware, Ltd.
发明人： Yehuda Zisapel , Avi Chesla , Shay Naeh , David Aviv
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00 , H04L29/06
CPC分类号： H04L63/1416 , H04L63/1408 , H04L63/1441
摘要： A system and method for separation of traffic processing in a computing farm. The method comprises allocating a first group of computing resources of the computing farm to a trusted zone and a second group of computing resources to an un-trusted zone, wherein the computing resources in the first group are allocated to ensure at least service-level agreements (SLA) guaranteed to a group of trusted clients; determining, based on a plurality of security risk indication parameters, if a client associated with an incoming traffic is a trusted client or an un-trusted client; forwarding the incoming traffic to the second group of computing resources when the client is determined to be an un-trusted client; and diverting the incoming traffic to the first group of computing resources when the client is determined to be a trusted client, thereby ensuring at least the SLA guaranteed to the trusted client.
摘要翻译：用于分离计算场中的流量处理的系统和方法。该方法包括将计算场的第一组计算资源分配给可信区域和第二组计算资源到不可信区域，其中第一组中的计算资源被分配以确保至少服务级协议（SLA）保证一组可信赖的客户; 基于多个安全风险指示参数来确定与输入业务相关联的客户端是可信客户端还是不可信客户端; 当客户端被确定为不可信客户端时，将传入流量转发到第二组计算资源; 并且当客户机被确定为可信赖的客户端时，将传入流量转移到第一组计算资源，从而确保至少保证信任客户端的SLA。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式