Distributed denial of service attack mitigation
Provided herein are identification of a distributed denial of service attack and automatic implementation of preventive measures to halt the distributed denial of service attack. At substantially the same time as the attack, valid users/customers (e.g., devices) are provided quality of service and continued access to a website experiencing the distributed denial of service attack. Further, service to temporary or unknown users (e.g., devices) with public access to the website is suspended during the duration of the distributed denial of service attack.
1. A system, comprising:
a processor; and
a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
determining a presence of a code on a device accessing an online session of an identified website, wherein the code is a unique code and is linked to the identified website, and wherein the device is associated with a validated user; and
based on a determination that the code is present on the device:
deactivating a deny access flag for the identified website; and
launching the identified website through a secure shell; or
based on a determination that the code is not present on the device:
issuing a temporary token with a predefined validity time; and
launching the identified website through another secure shell during the predefined validity time.
2. The system of claim 1 , wherein the secure shell is a secure communications connection established between the device and the identified website.
3. The system of claim 1 , wherein the determining the presence of the code comprises determining if the code is installed on the device.
4. The system of claim 1 , wherein the presence of the code indicates the device is associated with an identity of a customer of an entity associated with the identified website.
5. The system of claim 1 , wherein lack of the code indicates the device is associated with an identity of an unknown user.
6. The system of claim 1 , wherein after expiration of the predefined validity time, a connection between the device and the identified website is disabled.
7. The system of claim 1 , the operations further comprise updating the device with a server address of the identified website periodically during the online session.
8. The system of claim 7 , wherein the updating is through a secure push model.
9. The system of claim 1 , the operations further comprise:
determining an identified website is undergoing a distributed denial of service attack; and
based on a determination that the code is not present on the device, activating a deny access flag of the device for access to the identified website, wherein access to the identified website by the device is prevented during the distributed denial of service attack.
10. The system of claim 1 , the code is present on the device as a digital certificate issued during a registration process with the identified website.
11. The system of claim 1 , the code is present on the device as a text file issued during a registration process with the identified website.
12. A method, comprising:
determining, by a system comprising a processor, an identified website is undergoing a distributed denial of service attack;
based on a determination that a code linked to the identified website is installed on a first device accessing an online session of the identified website during the distributed denial of service attack, wherein the device is associated with a validated user:
deactivating, by the system, a deny access flag of the first device for access to the identified website, and
launching, by the system, the identified website through a secure shell, wherein the first device accesses the identified website during the distributed denial of service attack; and
based on another determination that another code linked to the identified website is not installed on a second device accessing another online session of the identified website during the distributed denial of service attack:
activating, by the system, a deny access flag of the second device for access to the identified website, wherein access to the identified website to the second device is prevented during the distributed denial of service attack.
13. The method of claim 12 , the secure shell is a secure communication channel between the first device and the identified website.
14. The method of claim 12 , the code linked to the identified website is installed on the first device during a registration process with the identified website.
15. The method of claim 12 , the first device comprises an identification of a user independently verified by the identified website and the second device comprises another identification of an unverified user.
16. The method of claim 12 , the code is a digital certificate issued during a registration process with the identified website.
17. The method of claim 12 , the code is a text file issued during a registration process with the identified website.
18. A computer-readable storage device that stores executable instructions that, in response to execution, cause a system comprising a processor to perform operations, comprising:
determining a presence of a code linked to an identified website on a device accessing an online session of the identified website, wherein the device is associated with a validated user; and
based on a determination that the code is present on the device:
deactivating a deny access flag for the identified website; and
launching the identified website through a secure shell; or
based on a determination that the code is not present on the device:
issuing a temporary token with a predefined validity time; and
launching the identified website through the secure shell during the predefined validity time.
19. The computer-readable storage device of claim 18 , wherein the operations further comprise:
determining an identified website is undergoing a distributed denial of service attack;
based on a determination that the code is not present on the device, activating a deny access flag of the device for access to the identified website; and
preventing access to the identified website to the device during the distributed denial of service attack.
20. The computer-readable storage device of claim 18 , wherein the secure shell is secure communication connection between the device and the identified website.