Methods, systems, and computer program products for determining blocking measures for processing communication traffic anomalies
First Claim
Patent Images
1. A method of processing communication traffic, comprising:
- detecting an anomaly in the communication traffic;
applying a first blocking measure A to the anomalous traffic that stops the anomalous traffic; and
determining a second blocking measure B such that application of a logical combination of the first blocking measure A and the second blocking measure B to the anomalous traffic stops the anomalous traffic.
1 Assignment
0 Petitions
Accused Products
Abstract
Communication traffic is processed by detecting an anomaly in the communication traffic. A first blocking measure A is applied to the anomalous traffic that stops the anomalous traffic. A second blocking measure is determined such that application of a logical combination of the first blocking measure A and the second blocking measure to the anomalous traffic stops the anomalous traffic.
-
Citations
27 Claims
-
1. A method of processing communication traffic, comprising:
-
detecting an anomaly in the communication traffic;
applying a first blocking measure A to the anomalous traffic that stops the anomalous traffic; and
determining a second blocking measure B such that application of a logical combination of the first blocking measure A and the second blocking measure B to the anomalous traffic stops the anomalous traffic. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A method of processing communication traffic, comprising:
-
detecting an anomaly in the communication traffic;
applying a first blocking measure A to the anomalous traffic that reduces a flow rate of the anomalous traffic below a threshold; and
determining a second blocking measure B such that application of a logical combination of the first blocking measure A and the second blocking measure to the anomalous traffic reduces the flow rate of the anomalous traffic below the threshold.
-
-
10. A system for processing communication traffic, comprising:
-
means for detecting an anomaly in the communication traffic;
means for applying a first blocking measure A to the anomalous traffic that stops the anomalous traffic; and
means for determining a second blocking measure B such that application of a logical combination of the first blocking measure A and the second blocking measure B to the anomalous traffic stops the anomalous traffic. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17)
-
-
18. A system of processing communication traffic, comprising:
-
means for detecting an anomaly in the communication traffic;
means for applying a first blocking measure A to the anomalous traffic that reduces a flow rate of the anomalous traffic below a threshold; and
means for determining a second blocking measure B such that application of a logical combination of the first blocking measure A and the second blocking measure B to the anomalous traffic reduces the flow rate of the anomalous traffic below the threshold.
-
-
19. A computer program product for processing communication traffic, comprising:
-
a computer readable storage medium having computer readable program code embodied therein, the computer readable program code comprising;
computer readable program code configured to detect an anomaly in the communication traffic;
computer readable program code configured to apply a first blocking measure A to the anomalous traffic that stops the anomalous traffic; and
computer readable program code configured to determine a second blocking measure B such that application of a logical combination of the first blocking measure A and the second blocking measure B to the anomalous traffic stops the anomalous traffic. - View Dependent Claims (20, 21, 22, 23, 24, 25, 26)
-
-
27. A computer program product for processing communication traffic, comprising:
-
a computer readable storage medium having computer readable program code embodied therein, the computer readable program code comprising;
computer readable program code configured to detect an anomaly in the communication traffic;
computer readable program code configured to apply a first blocking measure A to the anomalous traffic that reduces a flow rate of the anomalous traffic below a threshold; and
computer readable program code configured to determine a second blocking measure B such that application of a logical combination of the first blocking measure A and the second blocking measure B to the anomalous traffic reduces the flow rate of the anomalous traffic below the threshold.
-
Specification