System and Method to Diffuse Denial-of-Service Attacks Using Virtual Machines

摘要

A system for diffusing denial-of-service attacks by using virtual machines is disclosed. In particular, the system may receive, from a measurement probe, a network transaction measurement associated with a first node in a network. Based on the network transaction measurement, the system may determine if the network transaction measurement satisfies a threshold measurement value. If the network transaction measurement satisfies the threshold measurement value, the system may determine that an attack is occurring at the first node in the network. The system may then identify one or more nodes that have capacity for handling traffic intended for the first node. Once the one or more nodes are identified, the system may launch virtual machines at the one or more nodes to handle legitimate traffic intended for the first node.

主权项

1. A system, comprising:
a memory that stores instructions; a processor that executes the instructions to perform operations, the operations comprising:
receiving, from a measurement probe, a network transaction measurement associated with a first node in a network;determining if the network transaction measurement satisfies a threshold measurement value;determining, if the network transaction measurement satisfies the threshold measurement value, that an attack is occurring at the first node in the network;identifying a second node having a capacity for handling traffic intended for the first node; andlaunching a first quantity of virtual machines at the second node to handle legitimate traffic of the traffic intended for the first node.