Cross-Carrier DDoS Alert System Using Diameter Rs Protocol

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current packet-switched networks lack effective mechanisms to share information about distributed denial of service (DDoS) attacks across different carriers, limiting their ability to mitigate such attacks due to limited visibility and resource constraints.

Innovation Solution

A system and method that identifies DDoS attacks within a first network and generates alerts using a Diameter-based security protocol to notify and share information with a second network, enabling cross-carrier collaboration to mitigate malicious traffic by sharing destination internet protocol and bad international mobile subscriber identity information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each network retains attack information locally without sharing, then each network maintains information security and control, but the ability to mitigate DDoS attacks is limited due to lack of visibility and collaboration

Engineering Contradiction:

Improveattack mitigation capabilityVSAvoidattack information sharing

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The patent introduces an intermediary mechanism (attack information sharing system using Diameter Rs protocol) that enables secure exchange of attack information between carriers. This intermediary resolves the contradiction by providing a controlled channel for information sharing that maintains security while enabling collaboration for DDoS mitigation

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If networks share attack information across carriers, then the ability to detect and mitigate DDoS attacks improves through enhanced visibility, but system complexity increases due to inter-carrier communication requirements

Engineering Contradiction:

Improveattack detection capabilityVSAvoidnetwork security system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal attack information sharing system based on the Diameter Rs protocol that can be deployed across multiple carriers and network types. This multi-functional approach allows the same system architecture to serve different carriers with varying security needs, reducing overall system complexity through standardization

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The Diameter Rs protocol acts as a standardized intermediary mechanism that simplifies inter-carrier communication. By providing a pre-defined security framework and message format, it reduces the complexity that would otherwise arise from custom point-to-point security implementations between carriers

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10230767B2Intra-carrier and inter-carrier network security system

Publication Date: 2019.03.12 AT&T INTELLECTUAL PROPERTY I L P

AI summary

A system and method for identifying distributed attacks, such as, but not limited to, distributed denial of service attacks and botnet attacks, in a first network serviced by a first carrier and configured to alert a second network serviced by a second carrier that is different from the first carrier is disclosed. Once an attack has been identified, an attack alert is generated and provided to the second network or other aspects of the first network, or both. The attack alerts may be distributed dynamically with the second network via diameter based security protocol Rs. Such system and method may mitigate distributed malicious attacks by sharing destination internet protocol and bad international mobile subscriber identity information across carriers.