| 主权项 |
1. A method for efficient mitigation of denial of service (DoS) attacks in a virtual network to maintain a security service level agreement (SLA) guarantee to protected objects, comprising:
ascertaining, by a central controller of the virtual network, that a denial of service (DoS) attack is performed in the virtual network; checking if the DoS attack affects at least one physical machine, the at least one physical machine hosting at least one protected object and at least one unprotected object, wherein the at least one protected object is provisioned with at least a guaranteed security service level agreement (SLA) and the at least one unprotected object is not provisioned with any guaranteed SLA; determining, by the central controller of the virtual network, an optimal mitigation action to ensure the at least one security SLA guaranteed to the least one protected object during the DoS attack, wherein the optimal mitigation action includes at least migrating any of the at least one unprotected and the at least one protected object to a different SLA zone; and executing the determined optimal mitigation action to mitigate the DoS attack, wherein the optimal mitigation action is facilitated by means of resources of the virtual network. |
