Systems, methods, and devices for defending a network

摘要

Certain exemplary embodiments comprise a method comprising: within a backbone network: for backbone network traffic addressed to a particular target and comprising attack traffic and non-attack traffic, the attack traffic simultaneously carried by the backbone network with the non-attack traffic: redirecting at least a portion of the attack traffic to a scrubbing complex; and allowing at least a portion of the non-attack traffic to continue to the particular target without redirection to the scrubbing complex.

主权项

1. A system for defending a network, comprising:
a memory that stores instructions; a processor that executes the instructions to perform operations, the operations comprising:
determining if greater than a predetermined amount of network traffic comprises attack traffic, wherein the network traffic is addressed to a target;redirecting, if greater than the predetermined amount of the network traffic is determined to comprise the attack traffic, a portion of the attack traffic to a scrubbing complex;providing feedback to a route controller, wherein the portion of the attack traffic that is redirected to the scrubbing complex is adjusted by the route controller based on the feedback; andtransmitting, to the target, scrubbed attack traffic from the scrubbing complex via a tunnel.