Edge Detection Device Redundancy for DDoS Mitigation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current solutions for providing client/server redundancy in computer networks are inadequate as they require clients to initiate handshakes or heartbeat signals, which may not be possible during denial of service attacks, making them ineffective in mitigating DDoS attacks and ensuring data storage redundancy.

Innovation Solution

A system with an edge detection device that maintains connections with multiple scrubbing center devices, sending and receiving synchronization signals, allowing for redundant scrubbing center functionality without the need for handshakes and simplifying key synchronization, enabling continuous operation even under attack.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If current redundancy solutions require clients to initiate handshakes or heartbeat signals, then client/server redundancy can be established, but the system becomes ineffective during denial of service attacks when clients cannot initiate communications

Engineering Contradiction:

Improveredundancy effectivenessVSAvoidvulnerability to DDoS attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

Instead of having the client initiate handshakes or heartbeat signals to establish redundancy connections, the patent inverts the approach by having the scrubbing centers proactively establish connections with the edge detection device. The scrubbing centers send synchronization signals to the edge device, eliminating the need for client-initiated communications that would fail during DDoS attacks.

Inventive Principle:

Principle #13The other way round (Inversion)

Solution Approach 2:

The patent implements preliminary action by pre-establishing multiple redundant scrubbing center connections with the edge detection device before attacks occur. The edge device maintains simultaneous connections with multiple scrubbing centers, and synchronization signals are exchanged in advance to ensure readiness. This allows immediate failover capability without requiring new handshakes during attacks.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If multiple scrubbing centers are connected to the edge detection device, then redundancy is provided, but synchronization and key management complexity increases

Engineering Contradiction:

Improvescrubbing center redundancyVSAvoidsynchronization complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the synchronization function into a unified process where all scrubbing centers communicate with the edge detection device using the same synchronization signal protocol. Encryption keys are propagated from the primary scrubbing center to all redundant scrubbing centers through the edge device, creating a coordinated system that manages multiple connections through a single standardized interface, thereby reducing overall synchronization complexity.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS9628510B2System and method for providing data storage redundancy for a protected network

Publication Date: 2017.04.18 ARBOR NETWORKS INC

AI summary

A system and method for providing redundancy with remote scrubbing center devices. The system includes an edge detection device and a plurality of scrubbing center devices in a telecommunications network for providing redundant scrubbing center functionality for the edge detection device. The edge detection device maintains a network connection with more than one of the plurality of scrubbing center devices whereby each of the more than one of the plurality of scrubbing center devices sends and receives a synchronization signal with each of the one or more edge detection devices as if it was the only remote scrubbing center device coupled to the edge detection device.