INTEGRATED USER CHALLENGE PRESENTATION FOR DDOS MITIGATION SERVICE

• US 20140115669A1
• Filed: 10/22/2012
• Published: 04/24/2014
• Est. Priority Date: 10/22/2012
• Status: Active Grant

• Current Assignee: VeriSign, Inc.
• Original Assignee: VeriSign, Inc.
• Inventors: TEODORO, Mark, LEACH, Sean
• Granted Patent: US 10,348,760 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/1458 Denial of Service

Abstract

Systems and methods are disclosed for providing distributed denial-of-service (DDoS) mitigation service. The systems and methods may receive a request to access a web server from a user host, generate an integrated user challenge page including a user challenge test and a web page image of the web server, and transmits the integrated user challenge page to the user host. The systems and methods may further receive an answer to the user challenge test from the user host, determine whether the answer to the user challenge test is correct or not. When the answer to the user challenge test is correct, the systems and methods may establish a connection between the user host and the web server.

Claims

1. A system for providing distributed denial-of-service (DDoS) mitigation service, the system comprising:

a user challenge processing module configured to generate a user challenge test when a request to access a web server is received from a user host, transmit an integrated user challenge page to the user host, process an answer received from the user host, and determine whether the answer is correct or not;

a user challenge page generating module configured to generate the integrated user challenge page, which includes both the user challenge test and a web page image of the web server; and

a web server accessing module configured to, when the answer received from the user host is correct, establish a connection between the user host and the web server.

2. The system of claim 1, wherein the user challenge page generating module includes a memory configured to store the web page image of the web server.

3. The system of claim 1, wherein the user challenge test is overlaid on the web page image in the integrated user challenge page.

4. The system of claim 1, wherein the web page image is blurred in the integrated user challenge page.

5. The system of claim 1, wherein the web page image is a static web page.

6. The system of claim 1, wherein the web page image is a rendered web page.

7. The system of claim 1, wherein the user challenge page generating module receives the web page image when the system is initialized, and stores the received web page image in the memory.

8. The system of claim 7, wherein the user challenge page generating module refreshes the web page image stored in the memory.

9. The system of claim 8, wherein the user challenge page generating module refreshes the web page image at a configurable interval.

10. The system of claim 8, wherein the user challenge page generating module refreshes the web page image at a specified time.

11. The system of claim 8, wherein the user challenge page generating module refreshes the web page image when a change is observed in a sampled response traffic.

12. The system of claim 8, wherein the user challenge page generating module refreshes the web page image on demand by a request.

13. The system of claim 1, wherein the user challenge processing module is configured to generate the user challenge test only when the request to access the web server is received from a user host having one of a plurality of predetermined IP addresses.

14. The system of claim 1, wherein the user challenge page generating module determines a type of a browser used by the user host, and generates the integrated user challenge page in accordance with the browser type of the user host.

15. A computer-implemented method for providing distributed denial-of-service (DDoS) mitigation service, the method comprising:

receiving a request to access a web server from a user host;

generating an integrated user challenge page including a user challenge test and a web page image of the web server;

transmitting the integrated user challenge page to the user host;

receiving an answer to the user challenge test from the user host;

determining whether the answer to the user challenge test is correct or not; and

when the answer to the user challenge test is correct, establishing a connection between the user host and the web server.

16. The computer-implemented method of claim 15, wherein the user challenge test is overlaid on the web page image in the integrated user challenge page.

17. The computer-implemented method of claim 15, wherein the web page image is blurred in the integrated user challenge page.

18. The computer-implemented method of claim 15, wherein the web page image is a static web page.

19. The computer-implemented method of claim 15, wherein the web page image is a rendered web page.

20. The computer-implemented method of claim 15, further comprising receiving the web page image, and storing the received web page image in the memory.

21. The computer-implemented method of claim 20, further including refreshing the web page image stored in the memory.

22. The computer-implemented method of claim 21, wherein the web page image is refreshed at a configurable interval.

23. The computer-implemented method of claim 21, wherein the web page image is refreshed at a specified time.

24. The computer-implemented method of claim 21, wherein the web page image is refreshed when a change is observed in a sampled response traffic.

25. The computer-implemented method of claim 21, wherein the web page image is refreshed on demand by a request.

26. The computer-implemented method of claim 15, further including:

determining whether an IP address of the user host belongs to a plurality of predetermined IP addresses;

generating the integrated user challenge page only when the IP address of the user host belongs to the plurality of predetermined IP addresses.

27. The computer-implemented method of claim 15, further including:

determining a type of a browser used by the user host; and

generating the integrated user challenge page in accordance with the browser type of the user host.

28. A non-transitory computer readable medium comprising:

instructions for providing distributed denial-of-service (DDoS) mitigation service that, when executed by one or more processors, enable the one or more processors to;

receive a request to access a web server from a user host;

generate an integrated user challenge page including a user challenge test and a web page image of the web server;

transmit the integrated user challenge page to the user host;

receive an answer to the user challenge test from the user host;

determine whether the answer to the user challenge test is correct or not; and

when the answer to the user challenge test is correct, establish a connection between the user host and the web server.