公开(公告)号：US12170688B1

公开(公告)日：2024-12-17

申请号：US17491387

申请日：2021-09-30

Applicant: Amazon Technologies, Inc.

Inventor： Adriana-Maria Horelu ,  Jeffrey Allen Lyon ,  Robert Benjamin Lang ,  Saket Tomer ,  Krzysztof Jan Pado ,  John Shields ,  Ben Sangho Jae ,  Matthew Hyun Seok Lee

IPC: H04L9/40

Abstract: A distributed denial of service attack is detected. In response to detection of the attack, application layer properties of network traffic associated with a web application under attack are analyzed. Changes to distributions of the application layer properties are identified. A signature is generated based, at least in part, on identifying a combination of application layer properties whose distributions have changed, and which identifies traffic increased since onset of the attack. A mitigation rule is generated based, at least in part, on the signature.