Managing cyber attacks through change of network address

摘要

A system for responding to a cyber-attack on a server. A notification is sent to a server administrator that a cyber-attack is occurring and the number of cyber-attacks on the server has exceeded a predetermined threshold. A request is received by a server, from the server administrator, in response to receiving the notification, to obtain a new Internet Protocol (IP) address for the server. The new IP address will be generated following a protocol received by the server from the server administrator. In response to receiving instructions to follow a protocol from the server administrator, the server requests a new IP address from a DHCP system. The DHCP system will obtain a new IP address for the server following the protocol sent by the server to the DHCP system.

主权项

1. A method comprising:
detecting a cyber-attack on a server; identifying a number of cyber-attacks on the server per unit of time; comparing the number of cyber-attacks per unit of time to a predetermined threshold; sending a notification to a server administrator in response to the number of cyber-attacks exceeding the threshold; receiving a IP change request from the server administrator, in response to the notification, the IP change request indicating a particular response protocol among a plurality of response protocols for generating a new IP address of the server; requesting the new IP address from an IP address providing server according to using the particular response protocol, wherein each response protocol indicates a procedure for selecting a new IP address and a specific range of IP addresses from which to select the new IP address; receiving the new IP address from the address providing server; identifying a lease time associated with the new IP address from the address providing server, wherein the new IP address is valid for a limited interval of time indicated by the lease time; and applying the new IP address for the limited interval of time.