07836295 is referenced by 4 patents and cites 52 patents.

Several deterrence mechanisms suitable for content distribution networks (CDN) are provided. These include a hash-based request routing scheme and a site allocation scheme. The hash-based request routing scheme provides a way to distinguish legitimate requests from bogus requests. Using this mechanism, an attacker is required to generate O(n2)amount of traffic to victimize a CDN-hosted site when the site content is served from n CDN caches. Without these modifications, the attacker must generate only O(n) traffic to bring down the site. The site allocation scheme provides sufficient isolation among CDN-hosted Web sites to prevent an attack on one Web site from making other sites unavailable. Using an allocation strategy based on binary codes, it can be guaranteed that a successful attack on any individual Web site that disables its assigned servers, does not also bring down other Web sites hosted by the CDN.

Title
Method and apparatus for improving the resilience of content distribution networks to distributed denial of service attacks
Application Number
10/207695
Publication Number
7836295 (B2)
Application Date
July 29, 2002
Publication Date
November 16, 2010
Inventor
Anees A Shaikh
Yorktown Heights
NY, US
Sambit Sahu
Mahopac
NY, US
Kang Won Lee
Nanuet
NY, US
Pau Chen Cheng
Yorktown Heights
NY, US
Suresh N Chari
Tarrytown
NY, US
Agent
F Chau & Associates
Assignee
International Business Machines Corporation
NY, US
IPC
H04L 12/66
View Original Source