Orchestrator Automates DDoS Scrubbing via Routing Advertisements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current telecommunications networks face challenges in responding quickly and efficiently to denial of service (DOS) and distributed denial of service (DDOS) attacks, as manual configuration of scrubbing services is time-consuming and may not effectively mitigate attacks in a timely manner.
Innovation Solution
Implementing a system that utilizes routing protocol advertisements to dynamically automate scrubbing techniques by associating IP addresses with customer profiles and configuring scrubbing devices within the network, allowing for automatic provisioning of scrubbing services without manual intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If manual configuration of scrubbing services is used, then device complexity is reduced, but response time to DDOS attacks increases and productivity decreases
Solution Approach 1:
The system automatically detects DDOS attacks and configures scrubbing services without human intervention. The network device monitors traffic patterns, identifies attack conditions, and autonomously provisions scrubbing resources, allowing the system to serve itself during security incidents.
Solution Approach 2:
The system pre-configures scrubbing service templates and policies before attacks occur. When a DDOS attack is detected, these pre-prepared configurations are automatically activated, eliminating the need for real-time manual setup and enabling immediate response.
2Productivity
If manual configuration of scrubbing services is used, then ease of operation is improved, but productivity decreases
Solution Approach 1:
The network device automatically provisions scrubbing services by detecting attack patterns and self-configuring the necessary routing and filtering rules, eliminating the need for operator intervention and dramatically increasing provisioning speed.
Solution Approach 2:
The system continuously monitors network traffic for signs of DDOS attacks and uses this feedback to automatically trigger and adjust scrubbing service configurations, creating a closed-loop system that responds dynamically to threat conditions.
3Reliability
If automated scrubbing techniques are implemented, then response time to DDOS attacks improves, but device complexity increases
Solution Approach 1:
The automated scrubbing system is divided into distinct functional modules: traffic monitoring components, attack detection engines, service provisioning modules, and configuration management systems. This segmentation allows complex functionality to be managed through specialized, independent components.
Solution Approach 2:
The patent introduces an intermediary orchestrator or controller that manages the complex interactions between detection systems, scrubbing devices, and network infrastructure, simplifying the overall system architecture by centralizing coordination functions.
4Productivity
If automated routing protocol advertisements are used, then productivity improves, but ease of operation worsens
Solution Approach 1:
The network device automatically generates and advertises routing information through protocol advertisements when scrubbing services are activated, eliminating the need for operators to manually configure routing updates and enabling seamless service deployment.
Data Source
AI summary
Aspects of the present disclosure involve systems, methods, computer program products, and the like, for an orchestrator device associated with a scrubbing environment of a telecommunications network that receives one or more announced routing protocol advertisements from a customer device under an attack. In response to receiving the announcement, the orchestrator may configure one or more scrubbing devices of the network to begin providing the scrubbing service to packets matching the received routing announcement. A scrubbing service state for the customer may also be obtained or determined by the orchestrator. With the received route announcement and the customer profile and state information, the orchestrator may provide instructions to configure the scrubbing devices of the network based on the received information to dynamically automate scrubbing techniques without the need for a network administrator to manually configure the scrubbing environment or devices.