Attack Handling Location Selection Based on Traffic Volume Thresholds

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Random selection of forwarding points for attack traffic can lead to resource overload in protection apparatuses, potentially causing function stoppages and high transfer costs, necessitating a method to select forwarding points based on handling resource capacity and transfer costs.

Innovation Solution

An attack handling location selection apparatus that acquires traffic volumes of multiple transfer apparatuses, assigns priorities based on these volumes, and selects the highest-ranking apparatus as the forwarding point to the protection apparatus, optimizing resource usage and reducing transfer costs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a forwarding point is randomly decided when forwarding attack traffic to the protection apparatus, then the operation is simple, but it may be difficult to perform appropriate handling and may cause resource overload

Engineering Contradiction:

Improvesimplicity of forwarding point selectionVSAvoidappropriateness of attack traffic handling

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent changes the selection criterion from random to based on traffic volume parameters. The control apparatus acquires traffic volumes from multiple forwarding points and selects based on comparing these volumes against the protection apparatus handling capacity, transforming a random process into a parameter-driven decision process

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The control apparatus performs preliminary acquisition of traffic volume information from multiple forwarding points before making the selection decision. This preliminary data gathering allows the system to make informed decisions about which forwarding point to use, preventing resource overload before it occurs

Inventive Principle:

Principle #10Preliminary action

2Productivity

If a location through which a large volume of traffic passes is selected as the forwarding point, then the attack traffic can be forwarded efficiently, but traffic exceeding the upper limit of handling resource may enter the protection apparatus causing function stoppage

Engineering Contradiction:

Improveefficiency of attack traffic forwardingVSAvoidstability of protection apparatus

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent introduces a critical threshold parameter representing the upper limit of handling resource of the protection apparatus. By comparing the traffic volume of each forwarding point against this threshold parameter, the system identifies suitable forwarding points that balance efficiency with protection apparatus stability

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The control apparatus uses feedback from the protection apparatus regarding its handling capacity to dynamically adjust forwarding point selection. The system continuously monitors whether the protection apparatus can handle the traffic from selected forwarding points and adjusts selections accordingly to maintain stable operation

Inventive Principle:

Principle #23Feedback

3Quantity of substance

If a forwarding point with large volume of attack traffic is selected, then the attack traffic handling is thorough, but the transfer cost for forwarding and returning may be too high

Engineering Contradiction:

Improvevolume of attack traffic handledVSAvoidtransfer cost

Core Design Contradiction:

Quantity of substanceVSLoss of energy

Solution Approach 1:

The patent introduces a composite evaluation parameter that combines traffic volume with transfer cost considerations. Instead of selecting solely based on maximum traffic volume, the system evaluates forwarding points using a parameter that accounts for both the volume of attack traffic and the associated transfer costs, optimizing the balance between thorough handling and cost efficiency

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS11843615B2Attack response point selecting apparatus and attack response point selecting method

Publication Date: 2023.12.12 NIPPON TELEGRAPH & TELEPHONE CORP

AI summary

An attack handling location selection apparatus includes an acquisition unit configured to acquire traffic volumes of a plurality of first transfer apparatuses related to a path of an attack traffic, and a selection unit configured to assign priorities based on the traffic volumes to second transfer apparatuses extracted from the plurality of first transfer apparatuses based on comparison between the traffic volume of each first transfer apparatus and an upper limit value of a traffic volume capable of being handled by a protection apparatus configured to handle the attack traffic, and select, as a forwarding point of the traffic to the protection apparatus, a highest-ranking third transfer apparatus in the priorities. Thus, a forwarding point capable of increasing the likelihood that attack traffic is appropriately handled is selected.