WebRTC Edge System Mitigates DoS Attacks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

WebRTC systems within enterprise networks are vulnerable to attacks such as Denial of Service (DoS) that overwhelm the server, preventing it from handling legitimate requests, and these attacks traverse the network even if the server is configured to mitigate them, consuming network resources.

Innovation Solution

An edge system is configured to obtain access criteria for allowing WebRTC connections, receiving WebRTC signaling, and blocking connections based on these criteria, which include thresholds and network characteristics like IP addresses and physical locations, to prevent malicious traffic from entering the enterprise network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the WebRTC server is configured to mitigate attacks, then the server can handle attack traffic, but network resources are still consumed transporting attack communications before reaching the server

Engineering Contradiction:

Improveserver ability to handle attacksVSAvoidnetwork resource consumption

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The edge system performs preliminary filtering of WebRTC connections before they reach the WebRTC server. By evaluating access criteria and blocking malicious connections at the network edge, the system prevents attack traffic from traversing the enterprise network, thereby conserving network resources while maintaining server security

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The edge system acts as an intermediary between external networks and the WebRTC server. It intercepts WebRTC signaling traffic, evaluates connections against access criteria, and selectively blocks malicious traffic before it reaches the server, thus protecting both network resources and server integrity

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If the WebRTC server accepts all connections, then legitimate communications are not blocked, but the server becomes vulnerable to DoS attacks

Engineering Contradiction:

Improvelegitimate communication throughputVSAvoidvulnerability to DoS attacks

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The edge system applies different treatment to different connections based on their characteristics. By evaluating each WebRTC connection against access criteria (such as IP address, geographic location, connection rate), the system allows legitimate connections to pass through while blocking malicious ones, thus maintaining productivity while defending against DoS attacks

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS10630717B2Mitigation of WebRTC attacks using a network edge system

Publication Date: 2020.04.21 PULSELINK SYSTEMS LLC

AI summary

Embodiments disclosed herein provide systems and methods for mitigating attacks on a WebRTC system at the edge of an enterprise network. In a particular embodiment a method provides obtaining access criteria regarding access to a WebRTC system in the enterprise network, wherein the access criteria comprise instructions for allowing WebRTC connections with the WebRTC system. The method further provides receiving WebRTC signaling associated with WebRTC connections between the WebRTC system and endpoints having network addresses outside the enterprise network and blocking at least one connection associated with the WebRTC signaling from participating in WebRTC communications with the WebRTC system based on the access criteria.