SYSTEM AND METHOD OF TRAFFIC FILTRATION AT DDoS-ATTACK DETECTION Russian patent published in 2018 - IPC G06F21/55 G06F21/57 H04L12/28 

FIELD: information technology.

SUBSTANCE: invention relates to the field of protecting computing devices from DDoS attacks, namely, to a method for restricting the transmission of data by a network node to a computing device under a DDoS attack. Method is proposed in which data coming from a network node to a computing device under the DDoS attack is intercepted, the parameters of the data being transmitted are determined; network node's threat rating is established by querying the network node database containing the threat ratings; network node's threat rating is changed by applying at least one filter to the parameters of the transmitted data; wherein each change in the node's network node risk rating using each filter has its own lifetime, after which the change is canceled; transmission of data from the network node to the computing device is restricted if the changed threat rating of the specified network node exceeds a specified threshold.

EFFECT: technical result of the invention is to provide protection for the computing device in a DDoS attack.

11 cl, 7 dwg