METHOD AND SYSTEM FOR MITIGATION OF DISTRIBUTED DENIAL OF SERVICE (DDOS) ATTACKS

摘要

A system and method for mitigating the effects of malicious internet traffic, including DDOS attacks, by utilizing a DNS Traffic Analyzer and Firewall to analyze network traffic intended for a DNS server and preventing some network traffic from accessing the DNS server.

主权项

1. A system for mitigating malicious network traffic, comprising:
a protected server within a domain; at least one Authoritative Domain Name System (DNS) server of the domain; at least one DNS Traffic Analyzer and Firewall (DTAF), wherein network traffic must pass through the DTAF Firewall(s) before accessing the Authoritative DNS server(s), and wherein the DTAF Firewall(s) analyzes the network traffic attempting to pass through the DTAF Firewall; and a Central Master DTAF, wherein the DTAF Firewall(s) send network traffic data to the Central Master DTAF, and wherein the Central Master DTAF sends at least one access control list to the DTAF Firewall(s).