Arbor Networks, Inc., a leading provider of DDoS and advanced threat protection solutions for enterprise and service provider networks, today announced three additional patents for different aspects of DDoS attack detection and mitigation. Arbor has now secured 25 patents focused on DDoS defense.

Since Arbor's founding, research and innovation has been at the heart of what we do. The Lighthouse Project was spun out of the University of Michigan and funded by DARPA in the late 1990s. This led to the discovery of highly scalable, service provider-class solutions for the rapid detection, backtracking and mitigation of DDoS attacks. The technology was commercialized through the founding of Arbor Networks in the summer of 2000. The Lighthouse Project was later named one of 10 Brilliant DARPA Inventions, alongside the creation of the Internet, GPS and Unix.

"The spirit of innovation and problem solving that led to our founding has remained a vital part of the Arbor culture ever since. Arbor has the world's leading experts in DDoS defense. We've gained tremendous insight and experience through our relationships with the world's largest network operators." said Arbor Networks President Matthew Moynahan. "That focus on innovation and our institutional knowledge will be critical in the coming years as DDoS attacks continue to grow in size and complexity. With the emergence of the IoT on the horizon, it's likely to get even more challenging in the future."

World Leader in DDoS Prevention
According to Infonetics Research's June 2015 DDoS Prevention Appliance Market Outlook report, Arbor was identified as the top supplier of DDoS mitigation appliances overall as well as in the Carrier, Enterprise and Mobile market segments.

Arbor DDoS solutions deliver the industry's most advanced DDoS attack detection, countermeasures and protections. Our portfolio offers complete deployment flexibility to meet the needs of any organization, from virtual solutions, network-embedded solutions within Cisco's ASR 9000 routers, to appliances for enterprises and carrier-class scrubbing centers. In Arbor Cloud, we offer a best-practice DDoS defense service that tightly integrates on-premsies and cloud-based mitigation in a single solution.

New Patents Secured

Adjusting DDoS protection based on traffic type

Granted: June 16, 2015

Abstract: A system, method and computer readable storage medium that receives traffic/packets from external devices attempting to access protected devices in a protected network. A determination is made to whether a received packet belongs to one of a plurality of packet classifications. Each packet classification indicative of different classes of IP traffic. Countermeasures are applied to a received packet to prevent attack upon the protected devices. Applying a countermeasure to a received packet determined to belong to one of the plurality of packet classifications includes countermeasure modification/selection contingent upon the determined packet classification for the received packet.

Method and system for monitoring flows in network traffic

Granted: June 9, 2015

Abstract: A method and system for correlating web content with content providers to determine the origin of the content such that it is not necessary to look inside the information exchange. The method and system maintains sequences of reference points, which are ordered lists of content providers accessed by subscribers over time, and correlates the internet content applications, such as video, found in network traffic to the sequence of reference points accessed by subscribers to determine the origins of the content even when the content being delivered by third-party content delivery networks.

Building filter through utilization of automated generation of regular expression

Granted: June 2, 2015

Abstract: A system and method performed by a computing device connected to a network and having one or more processors and memory storing one or more programs for execution by the one or more processors. At least one packet is received over a network. The packet is analyzed to detect predetermined content. The predetermined content is selected if it is determined that the packet contains the predetermined content. Future transmission of any packet containing the predetermined content is prevented in response to selection of the predetermined content.