VERTICAL THREAT ANALYTICS FOR DDOS ATTACKS

摘要

Embodiments are provided to allow institutions and individuals the ability to subscribe to notifications regarding DDoS attacks on certain types of institutions, e.g., institutions that fall into certain market verticals or categories. Subscriber data can be integrated with an attack monitoring platform (AMP), which can push out certain information to a system, which tabulates and analyzes the information regarding attacks. If an attack is detected based on predefined thresholds and conditions, a database lookup is performed and a notification that contains certain attack attributes can be sent out to the appropriate subscribers. Subscribers can also be provided with a mechanism to modify their level of DDoS attack notification threshold.

主权项

1. A method of providing notifications of a DDoS attack to a customer, the method comprising performing, by a computer system:
receiving an indication that one or more first network resources of a first customer are under attack; monitoring a rate of the attack to obtain one or more measured rates; calculating a first quantity from the one or more measured rates of the attack on the one or more first network resources; comparing the first quantity to a first threshold; when the first quantity exceeds the first threshold, retrieving statistical data about the attack; and providing a first notification to the first customer, the first notification providing access to the statistical data.