PROTECTION METHOD OF VIRTUAL PRIVATE COMMUNICATION NETWORKS ELEMENTS FROM DDOS-ATTACKS Russian patent published in 2017 - IPC G06F21/55 G06F21/62 H04L12/28 G06F11/30 

FIELD: radio engineering, communication.

SUBSTANCE: method according to which create the parameters, changing statistic models of the virtual network subscribers from the white list of IP-addresses network traffic, describe the values of the abnormal behaviour parameters of subscribers from the white list of IP-addresses, during the virtual private network element is operating provide the monitoring of the subscribers abnormal behaviour, if the abnormal behaviour is detected then check the timestamps, the cryptographic hashing function, if the subscriber has not confirmed its legitimacy, the connection is broken and the reconnection is carried out, in case of the IP-address absence in the "White" and "Black" lists, the content of the received packet is filtered according to the specified filtering rules, if it detects and confirms the signs of the DDoS attacks start, simulate its effect on the virtual private network element, if the virtual private network element parameter values of the confirmed DDoS attack as a result of simulation are below the required ones, the received network traffic from the virtual private network users, that are not in the white list is redirected to the clearing centres.

EFFECT: protection of virtual communication networks elements from DDoS-attacks.

6 dwg