VOLUME DDOS ATTACKS PROTECTION SYSTEM AND METHOD Russian patent published in 2023 - IPC H04L9/40 

FIELD: information systems protection.

SUBSTANCE: invention relates to information systems protection field. Method comprises the following stages: specifying passing traffic thresholds for two protection methods, the values of which are set by an operator; coleecting information about flow from routers to a NetFlow collector; analyzing and calculating the flow traffic volume using a NetFlow collector; determining the deviations that occur in a form of the traffic threshold exceeding using a NetFlow collector; sending network credentials via the detected flow message broker to exabgp-consumer software installed on the ExaBGP server to block or limit the bandwidth of malicious traffic using BGP-FlowSpec or BGP BlackHole; generate exabgp-consumer blocking rule for types of attacks based on malicious traffic volume in case only BGP-FlowSpec was exceeded; generating exabgp-consumer blocking rule by substituting the BGP community attribute specified by the autonomous system administrator to block malicious traffic in case both BGP FlowSpec and BGP Blackhole were exceeded.

EFFECT: invention provides protection against Volume DDoS attacks.

2 cl, 2 dwg