Cyber Attack Mitigation Coordination Across Protection Services
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cyber attack protection services face challenges in handling large-scale attacks due to limited capacity or lack of detection mechanisms, leading to ineffective mitigation and continued exposure of computing domains to attacks, especially when multiple protection services are managed by distinct administrative entities with limited visibility and coordination.
Innovation Solution
A method and device that utilize a central management system to determine the incapability of one protection service and develop a mitigation plan based on another service's capabilities, coordinating actions across multiple protection services to enhance attack handling and mitigate deficiencies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple protection services are deployed to protect computing domain resources, then the coverage and scope of protection is improved, but the coordination and visibility between services deteriorates due to distinct administrative entities
Solution Approach 1:
The patent introduces a central management system that acts as an intermediary between multiple protection services. This mediator collects information from all protection services, maintains a global view of the computing domain, and coordinates their actions. The central management system enables information sharing and coordinated response without requiring direct communication between protection services managed by different administrative entities.
2Adaptability or versatility
If protection services operate independently with their own filtering policies, then service autonomy is improved, but the ability to handle large-scale distributed attacks deteriorates
Solution Approach 1:
The patent merges the capabilities of multiple independent protection services under a unified coordination framework. The central management system aggregates information from all services and synthesizes a comprehensive mitigation plan that leverages the combined capacity of all protection services. This allows the system to handle large-scale attacks that would exceed the capacity of any single service while preserving the operational autonomy of each service through standardized interfaces.
3Reliability
If filtering policies are implemented across multiple networks to block attack traffic, then attack mitigation effectiveness is improved, but the complexity of policy implementation and coordination increases
Solution Approach 1:
The patent extracts the complex task of policy coordination from the individual protection services and centralizes it in the management system. The central management system formulates the overall mitigation strategy and distributes simplified policy instructions to each protection service. This extraction of coordination complexity allows individual services to focus on their core filtering functions while the centralized system handles the intricate coordination across multiple networks and administrative entities.
Data Source
AI summary
Assistance method for managing a cyber attack, and device and system thereof. The assistance method is implemented by a device managing resources of a computing domain, these resources being protected by a plurality of cyber attack protection services. The method includes: determining an incapability of a first protection service from among the plurality of protection services to handle a cyber attack targeting at least one resource of the computing domain; developing a mitigation plan for mitigating the attack based on a mitigation plan obtained from a second protection service from among the plurality of protection services or using assistance provided by at least the second protection service; and transmitting the developed mitigation plan to the first protection service to handle the attack.