IP Library › Granted Patent US 12,445,483
Granted Patent B2
US 12,445,483 · App. 18/508,122 · Granted Oct 14, 2025

Authoritative domain name system (DNS) server responding to DNS requests with IP addresses selected from a larger pool of IP addresses

Inventors: Lee Hahn Holloway (Santa Cruz, CA); Srikanth N. Rao (San Francisco, CA); Matthew Browning Prince (San Francisco, CA); Matthieu Philippe François Tourne (San Francisco, CA); Ian Gerald Pye (Santa Cruz, CA); Ray Raymond Bejjani (San Francisco, CA); Terry Paul Rodery, Jr. (Millbrae, CA)
Assignee: CLOUDFLARE, INC.
H04L63/1458G06F21/552G06F21/577H04L63/0281H04L63/1408H04L63/1416H04L63/1425H04L63/1433H04L63/1466H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,445,483
App. No.
18/508,122
Granted
Oct 14, 2025
Kind
B2
Abstract

An authoritative domain name system (DNS) server receives DNS requests for domains. The authoritative DNS server transmits DNS responses to the DNS requests with address records that include IP addresses that are selected from a larger pool of IP addresses, where a first DNS response can include IP addresses different from IP addresses included in a second DNS response for the same domain. Also, the same IP addresses may be returned for a first domain and a different, second domain. The authoritative DNS server may select the IP addresses to include in DNS responses to the DNS requests using a round-robin process.

Claims (47)

1. A method, comprising:

receiving, at an authoritative domain name system (DNS) server from a first requester, a first DNS request for a first domain;

transmitting a first DNS response to the first requester with a first plurality of address resource records, wherein the first plurality of address resource records respectively includes a first plurality of IP addresses that are selected via a first round-robin process from a second plurality of IP addresses, wherein a second number of the second plurality of IP addresses is greater than a first number of the first plurality of IP addresses;

receiving, at the authoritative DNS server from a second requester, a second DNS request for the first domain; and

transmitting a second DNS response to the second requester with a second plurality of address resource records, wherein the second plurality of address resource records respectively includes a third plurality of IP addresses that are selected via a second round-robin process from the second plurality of IP addresses, wherein the second number of the second plurality of IP addresses is greater than a third number of the third plurality of IP addresses.

2. The method of claim 1 , wherein the first plurality of IP addresses and the third plurality of IP addresses are different.

3. The method of claim 1 , wherein the second number of the second plurality of IP addresses is over one thousand.

4. The method of claim 1 , wherein the first plurality of address resource records is less than six address resource records, and wherein the second plurality of address resource records is less than six address resource records.

5. The method of claim 1 , further comprising:

receiving, at the authoritative DNS server from a third requester, a third DNS request for a second domain, wherein the first domain and the second domain are different; and

transmitting a third DNS response to the third requester with a third plurality of address resource records, wherein the third plurality of address resource records respectively includes a fourth plurality of IP addresses that are selected from the second plurality of IP addresses, wherein the second plurality of IP addresses is greater than the fourth plurality of IP addresses, and wherein the fourth plurality of IP addresses includes at least some overlapping IP addresses with the first plurality of IP addresses.

6. The method of claim 1 , further comprising:

determining that there is traffic indicative of a denial-of-service (DOS) attack directed to one of the second plurality of IP addresses, and responsive to this determination, rate limiting or blocking traffic directed to that one of the second plurality of IP addresses.

7. The method of claim 1 , further comprising:

determining that there is traffic indicative of a denial-of-service (DOS) attack directed to the first domain, and responsive to this determination, rate limiting a number of connections to the second plurality of IP addresses for the first domain to a historical normal traffic level of the first domain divided by the second number of the second plurality of IP addresses.

8. A non-transitory computer-readable storage medium that provides instructions that, if executed by a processor, will cause said processor to perform operations comprising:

receiving, at an authoritative domain name system (DNS) server from a first requester, a first DNS request for a first domain;

transmitting a first DNS response to the first requester with a first plurality of address resource records, wherein the first plurality of address resource records respectively includes a first plurality of IP addresses that are selected via a first round-robin process from a second plurality of IP addresses, wherein a second number of the second plurality of IP addresses is greater than a first number of the first plurality of IP addresses;

receiving, at the authoritative DNS server from a second requester, a second DNS request for the first domain; and

transmitting a second DNS response to the second requester with a second plurality of address resource records, wherein the second plurality of address resource records respectively includes a third plurality of IP addresses that are selected via a second round-robin process from the second plurality of IP addresses, wherein the second number of the second plurality of IP addresses is greater than a third number of the third plurality of IP addresses.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the first plurality of IP addresses and the third plurality of IP addresses are different.

10. The non-transitory computer-readable storage medium of claim 8 , wherein the second number of the second plurality of IP addresses is over one thousand.

11. The non-transitory computer-readable storage medium of claim 8 , wherein the first plurality of address resource records is less than six address resource records, and wherein the second plurality of address resource records is less than six address resource records.

12. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise:

receiving, at the authoritative DNS server from a third requester, a third DNS request for a second domain, wherein the first domain and the second domain are different; and

transmitting a third DNS response to the third requester with a third plurality of address resource records, wherein the third plurality of address resource records respectively includes a fourth plurality of IP addresses that are selected from the second plurality of IP addresses, wherein the second plurality of IP addresses is greater than the fourth plurality of IP addresses, and wherein the fourth plurality of IP addresses includes at least some overlapping IP addresses with the first plurality of IP addresses.

13. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise:

determining that there is traffic indicative of a denial-of-service (DOS) attack directed to one of the second plurality of IP addresses, and responsive to this determination, rate limiting or blocking traffic directed to that one of the second plurality of IP addresses.

14. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise:

determining that there is traffic indicative of a denial-of-service (DOS) attack directed to the first domain, and responsive to this determination, rate limiting a number of connections to the second plurality of IP addresses for the first domain to a historical normal traffic level of the first domain divided by the second number of the second plurality of IP addresses.

15. An authoritative domain name system (DNS) server, comprising:

a processor; and

a non-transitory machine-readable storage medium that provides instructions that, if executed by the processor, will cause the authoritative DNS server to carry out operations including:

receiving, from a first requester, a first DNS request for a first domain;

transmitting a first DNS response to the first requester with a first plurality of address resource records, wherein the first plurality of address resource records respectively includes a first plurality of IP addresses that are selected via a first round-robin process from a second plurality of IP addresses, wherein a second number of the second plurality of IP addresses is greater than a first number of the first plurality of IP addresses;

receiving, at the authoritative DNS server from a second requester, a second DNS request for the first domain; and

transmitting a second DNS response to the second requester with a second plurality of address resource records, wherein the second plurality of address resource records respectively includes a third plurality of IP addresses that are selected via a second round-robin process from the second plurality of IP addresses, wherein the second number of the second plurality of IP addresses is greater than a third number of the third plurality of IP addresses.

16. The authoritative DNS server of claim 15 , wherein the first plurality of IP addresses and the third plurality of IP addresses are different.

17. The authoritative DNS server of claim 15 , wherein the second number of the second plurality of IP addresses is over one thousand.

18. The authoritative DNS server of claim 15 , wherein the first plurality of address resource records is less than six address resource records, and wherein the second plurality of address resource records is less than six address resource records.

19. The authoritative DNS server of claim 15 , wherein the operations further comprise:

receiving, at the authoritative DNS server from a third requester, a third DNS request for a second domain, wherein the first domain and the second domain are different; and

transmitting a third DNS response to the third requester with a third plurality of address resource records, wherein the third plurality of address resource records respectively includes a fourth plurality of IP addresses that are selected from the second plurality of IP addresses, wherein the second plurality of IP addresses is greater than the fourth plurality of IP addresses, and wherein the fourth plurality of IP addresses includes at least some overlapping IP addresses with the first plurality of IP addresses.

20. The authoritative DNS server of claim 15 , wherein the operations further comprise:

determining that there is traffic indicative of a denial-of-service (DOS) attack directed to one of the second plurality of IP addresses, and responsive to this determination, rate limiting or blocking traffic directed to that one of the second plurality of IP addresses.

21. The authoritative DNS server of claim 15 , wherein the operations further comprise:

determining that there is traffic indicative of a denial-of-service (DOS) attack directed to the first domain, and responsive to this determination, rate limiting a number of connections to the second plurality of IP addresses for the first domain to a historical normal traffic level of the first domain divided by the second number of the second plurality of IP addresses.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 16, 2025
From: HOLLOWAY, LEE HAHN; RAO, SRIKANTH N.; PRINCE, MATTHEW BROWNING; TOURNE, MATTHIEU PHILIPPE FRANÇOIS; PYE, IAN GERALD; BEJJANI, RAY RAYMOND; RODERY, TERRY PAUL, JR
To: CLOUDFLARE, INC.
Reel/Frame 071426/0908 →
SECURITY INTEREST Recorded May 20, 2024
From: CLOUDFLARE, INC.
To: CITIBANK, N.A.
Reel/Frame 067472/0246 →
Continuity (8)
Continuation 17509829 · Oct 25, 2021
Continuation 16800175 · Feb 25, 2020
Continuation 15489421 · Apr 17, 2017
Continuation 14109815 · Dec 17, 2013
Continuation 13665802 · Oct 31, 2012
Provisional Application 61719116 · Oct 26, 2012
Provisional Application 61680684 · Aug 7, 2012
Related Publication 20240121265A1 · Apr 11, 2024
References Cited (176)
US 5729689A · Allard et al. · 1998 [cited by applicant]
US 6182139B1 · Brendel · 2001 [cited by applicant]
US 6317775B1 · Coile et al. · 2001 [cited by applicant]
US 6415323B1 · Mccanne et al. · 2002 [cited by applicant]
US 6839761B2 · Kadyk et al. · 2005 [cited by applicant]
US 7003555B1 · Jungck · 2006 [cited by applicant]
US 7028179B2 · Anderson et al. · 2006 [cited by applicant]
US 7051367B1 · Krishnaswamy et al. · 2006 [cited by applicant]
US 7124173B2 · Moriarty · 2006 [cited by applicant]
US 7162740B2 · Eastlake, III · 2007 [cited by applicant]
US 7178166B1 · Taylor et al. · 2007 [cited by applicant]
US 7188366B2 · Chen et al. · 2007 [cited by applicant]
US 7215637B1 · Ferguson et al. · 2007 [cited by applicant]
US 7251826B1 · Gardos et al. · 2007 [cited by applicant]
US 7307999B1 · Donaghey · 2007 [cited by applicant]
US 7346676B1 · Swildens et al. · 2008 [cited by applicant]
US 7360245B1 · Ramachandran et al. · 2008 [cited by applicant]
US 7444404B2 · Wetherall et al. · 2008 [cited by applicant]
US 7523497B2 · Cohen · 2009 [cited by applicant]
US 7539191B1 · Jacobson et al. · 2009 [cited by applicant]
US 7554930B2 · Gaddis et al. · 2009 [cited by applicant]
US 7574499B1 · Swildens et al. · 2009 [cited by applicant]
US 7606915B1 · Calinov et al. · 2009 [cited by applicant]
US 7617170B2 · Chesla · 2009 [cited by applicant]
US 7647424B2 · Kim et al. · 2010 [cited by applicant]
US 7653700B1 · Bahl et al. · 2010 [cited by applicant]
US 7653706B2 · Day et al. · 2010 [cited by applicant]
US 7890602B1 · Parsons et al. · 2011 [cited by applicant]
US 7949785B2 · Alkhatib et al. · 2011 [cited by applicant]
US 8006285B1 · Perlman · 2011 [cited by applicant]
US 8161145B2 · Carpenter et al. · 2012 [cited by applicant]
US 8180873B2 · Bhatt et al. · 2012 [cited by applicant]
US 8224931B1 · Brandwine et al. · 2012 [cited by applicant]
US 8260914B1 · Ranjan · 2012 [cited by applicant]
US 8261351B1 · Thornewell et al. · 2012 [cited by applicant]
US 8271678B2 · Wetherall et al. · 2012 [cited by applicant]
US 8429739B2 · Cohn · 2013 [cited by applicant]
US 8510807B1 · Elazary et al. · 2013 [cited by applicant]
US 8539576B2 · Van et al. · 2013 [cited by applicant]
US 8543732B2 · Ryan · 2013 [cited by applicant]
US 8549646B2 · Stavrou et al. · 2013 [cited by applicant]
US 8606898B1 · Phatak · 2013 [cited by applicant]
US 8613089B1 · Holloway et al. · 2013 [cited by applicant]
US 8631489B2 · Antonakakis et al. · 2014 [cited by applicant]
US 8645508B1 · Dickinson et al. · 2014 [cited by applicant]
US 8676989B2 · Treuhaft et al. · 2014 [cited by applicant]
US 8838973B1 · Yung et al. · 2014 [cited by applicant]
US 8844040B2 · Harris et al. · 2014 [cited by applicant]
US 8955112B2 · Nguyen et al. · 2015 [cited by applicant]
US 9041765B2 · Periyannan et al. · 2015 [cited by applicant]
US 9225731B2 · Crume · 2015 [cited by applicant]
US 9420049B1 · Talmor et al. · 2016 [cited by applicant]
US 9906552B1 · Brown et al. · 2018 [cited by applicant]
US 20010056416A1 · Garcia-Luna-Aceves · 2001 [cited by applicant]
US 20020002686A1 · Vange et al. · 2002 [cited by applicant]
US 20020066044A1 · Ikeda · 2002 [cited by applicant]
US 20020078174A1 · Sim et al. · 2002 [cited by applicant]
US 20020078381A1 · Farley et al. · 2002 [cited by applicant]
US 20020104022A1 · Jorgenson · 2002 [cited by applicant]
US 20020107960A1 · Wetherall et al. · 2002 [cited by applicant]
US 20020120853A1 · Tyree · 2002 [cited by applicant]
US 20020138649A1 · Cartmell et al. · 2002 [cited by applicant]
US 20030050918A1 · Pilkington et al. · 2003 [cited by applicant]
US 20030056116A1 · Bunker et al. · 2003 [cited by applicant]
US 20030061512A1 · Flurry et al. · 2003 [cited by applicant]
US 20030070096A1 · Pazi et al. · 2003 [cited by applicant]
US 20030200307A1 · Raju et al. · 2003 [cited by applicant]
US 20030212660A1 · Kerwin · 2003 [cited by applicant]
US 20040059793A1 · Gruber et al. · 2004 [cited by applicant]
US 20040059951A1 · Pinkas et al. · 2004 [cited by applicant]
US 20040083306A1 · Gloe · 2004 [cited by applicant]
US 20040083372A1 · Williamson et al. · 2004 [cited by applicant]
US 20040088542A1 · Daude et al. · 2004 [cited by applicant]
US 20040093521A1 · Hamadeh et al. · 2004 [cited by applicant]
US 20040107234A1 · Rajahalme · 2004 [cited by applicant]
US 20040146045A1 · Jimmei et al. · 2004 [cited by applicant]
US 20040148520A1 · Talpade et al. · 2004 [cited by applicant]
US 20040250131A1 · Swander et al. · 2004 [cited by applicant]
US 20040268152A1 · Xia et al. · 2004 [cited by applicant]
US 20050005107A1 · Touboul · 2005 [cited by applicant]
US 20050022010A1 · Swander et al. · 2005 [cited by applicant]
US 20050083858A1 · Loa et al. · 2005 [cited by applicant]
US 20050120201A1 · Benaloh et al. · 2005 [cited by applicant]
US 20050132060A1 · Mo et al. · 2005 [cited by applicant]
US 20050157647A1 · Sterne et al. · 2005 [cited by applicant]
US 20050204041A1 · Blinn et al. · 2005 [cited by applicant]
US 20060026421A1 · Gasparini et al. · 2006 [cited by applicant]
US 20060036720A1 · Faulk · 2006 [cited by applicant]
US 20060069804A1 · Miyake et al. · 2006 [cited by applicant]
US 20060075491A1 · Lyon · 2006 [cited by applicant]
US 20060095526A1 · Levergood et al. · 2006 [cited by applicant]
US 20060159100A1 · Droms et al. · 2006 [cited by applicant]
US 20060174324A1 · Zur et al. · 2006 [cited by applicant]
US 20060236394A1 · Morrow et al. · 2006 [cited by applicant]
US 20060272018A1 · Fouant · 2006 [cited by applicant]
US 20070067839A1 · Hamada et al. · 2007 [cited by applicant]
US 20070094491A1 · Teo et al. · 2007 [cited by applicant]
US 20070107059A1 · Chasin et al. · 2007 [cited by applicant]
US 20070118669A1 · Rand et al. · 2007 [cited by applicant]
US 20070130619A1 · Reams · 2007 [cited by applicant]
US 20070140245A1 · Anjum et al. · 2007 [cited by applicant]
US 20070143624A1 · Steeves · 2007 [cited by applicant]
US 20070156592A1 · Henderson · 2007 [cited by applicant]
US 20070177499A1 · Gavrilescu et al. · 2007 [cited by applicant]
US 20070214505A1 · Stavrou et al. · 2007 [cited by applicant]
US 20070258438A1 · Bennett · 2007 [cited by applicant]
US 20070266257A1 · Camaisa et al. · 2007 [cited by applicant]
US 20080028463A1 · Dagon et al. · 2008 [cited by applicant]
US 20080072293A1 · Andrew · 2008 [cited by applicant]
US 20080109657A1 · Bajaj et al. · 2008 [cited by applicant]
US 20080147885A1 · Bessis · 2008 [cited by applicant]
US 20080168145A1 · Wilson · 2008 [cited by applicant]
US 20080225715A1 · Plamondon · 2008 [cited by applicant]
US 20080279222A1 · Fuller et al. · 2008 [cited by applicant]
US 20080301808A1 · Calo et al. · 2008 [cited by applicant]
US 20090013404A1 · Chow et al. · 2009 [cited by applicant]
US 20090044264A1 · Ramanathan et al. · 2009 [cited by applicant]
US 20090094372A1 · Nyang et al. · 2009 [cited by applicant]
US 20090144806A1 · Gal et al. · 2009 [cited by applicant]
US 20090259768A1 · Mcgrath et al. · 2009 [cited by applicant]
US 20090260083A1 · Szeto et al. · 2009 [cited by applicant]
US 20090265541A1 · Ylitalo et al. · 2009 [cited by applicant]
US 20090307485A1 · Weniger et al. · 2009 [cited by applicant]
US 20100020967A1 · Kailash et al. · 2010 [cited by applicant]
US 20100031315A1 · Feng et al. · 2010 [cited by applicant]
US 20100037314A1 · Perdisci et al. · 2010 [cited by applicant]
US 20100058471A1 · Kim · 2010 [cited by applicant]
US 20100138551A1 · Degaonkar et al. · 2010 [cited by applicant]
US 20100138919A1 · Peng et al. · 2010 [cited by applicant]
US 20100138921A1 · Na et al. · 2010 [cited by applicant]
US 20100162357A1 · Chickering et al. · 2010 [cited by applicant]
US 20100218254A1 · Gray, II · 2010 [cited by examiner]
US 20100229223A1 · Shepard et al. · 2010 [cited by applicant]
US 20110047230A1 · McGee · 2011 [cited by applicant]
US 20110067095A1 · Leicher et al. · 2011 [cited by applicant]
US 20110083179A1 · Lawson et al. · 2011 [cited by applicant]
US 20110099622A1 · Lee et al. · 2011 [cited by applicant]
US 20110138466A1 · Ji et al. · 2011 [cited by applicant]
US 20110154101A1 · Merwe et al. · 2011 [cited by applicant]
US 20110154497A1 · Bailey, Jr. · 2011 [cited by applicant]
US 20110179479A1 · Tsai et al. · 2011 [cited by applicant]
US 20110239295A1 · Sorge et al. · 2011 [cited by applicant]
US 20110270969A1 · Noh et al. · 2011 [cited by applicant]
US 20110289134A1 · De et al. · 2011 [cited by applicant]
US 20110296509A1 · Todorov · 2011 [cited by applicant]
US 20120036576A1 · Iyer · 2012 [cited by applicant]
US 20120066357A1 · McFate et al. · 2012 [cited by applicant]
US 20120090030A1 · Rapaport et al. · 2012 [cited by applicant]
US 20120110667A1 · Zubrilin et al. · 2012 [cited by applicant]
US 20120117649A1 · Holloway et al. · 2012 [cited by applicant]
US 20120124666A1 · Kim et al. · 2012 [cited by applicant]
US 20120173681A1 · Gould et al. · 2012 [cited by applicant]
US 20120210425A1 · Porras et al. · 2012 [cited by applicant]
US 20120250682A1 · Vincent et al. · 2012 [cited by applicant]
US 20120314575A1 · Frank et al. · 2012 [cited by applicant]
US 20120324113A1 · Prince et al. · 2012 [cited by applicant]
US 20130003538A1 · Greenberg et al. · 2013 [cited by applicant]
US 20130019311A1 · Swildens et al. · 2013 [cited by applicant]
US 20130031356A1 · Prince et al. · 2013 [cited by applicant]
US 20130191915A1 · Antonakakis et al. · 2013 [cited by applicant]
US 20130291117A1 · Thubert et al. · 2013 [cited by applicant]
US 20140029412A1 · Janardhanan · 2014 [cited by applicant]
DNS propagation delay: An effective and robust solution using authoritative response from non-authoritative server, Parwez et al, Apr. 2010 (Year: 2010). [cited by examiner]
Bailis, P. et al., ‘The Network is Reliable’, 2014, ACM 1542-7730/14/0700, pp. 1-13, http://delivery.acm.org/10.1145/2640000/2639988/2639988.pdf. [cited by applicant]
Ballani, H. et al., ‘Mitigating Dns Dos Attacks’, 2008, CCS'08, ACM 978-1-59593-810-Jul. 8, 2010, entire document, http://research.microsoft.com/en-US/um/people/hiballan/pubs/ccs08-staledns.pdf. [cited by applicant]
Djalaliev, P. et al., “Sentinel: Hardware-Accelerated Mitigation of Bot-Based DDoS Attacks,” Computer Communications and Networks, Aug. 3-7, 2008. ICCCN '08. Proceedings of 17th International Conference on Computer Comm… [cited by applicant]
Jung, Y. et al., Domain Name to IP Address Resolution System with Multiple Name Servers Adaptable to MANETs, Jun. 2012, pp. 1348-1357. [cited by applicant]
Chiba, T. et al., DoS packet filter using DNS information, Proceedings of the 20th International Conference on Advanced Information Networking and Applications (AINA 06), IEEE, Jan. 2006, 6 pages. [cited by applicant]
Hansen, R., ‘Stateful Anycast for DDOS Mitigation’, 2007, MIT, entire document, http://dspace.mit.edu/bitstream/ handle/1721.1/41539/219641263.pdf?sequence=1. [cited by applicant]
Holmes, David, F5 Networks, Inc., ‘Mitigating DDoS Attacks with F5 Technology’, F5 Networks, Inc., 2013, 19 pages, http://www.f5.com/pdf/white-papers/mitigating-ddos-attacks-tech-brief.pdf. [cited by applicant]
Longe, O.B. et al. “Checking Internet masquerading using multiple CAPTCHA challenge-response systems,” 2nd International Conference on Adaptive Science & Technology, Jan. 14-16, 2009, ICAST 2009., pp. 244-249. [cited by applicant]
Pope, Clark et al. “Is it human or computer? Defending e-commerce with Captchas,” Mar-Apr. 2005, IT Professional, vol. 7, No. 2, pp. 43-49. [cited by applicant]
Ryba, F.J., et al., Amplification and DRDOS Attack Defense—A Survey and New Perspectives', arXiv, May 17, 2016, 26 bages, https://aociv.org/pdf/1505.07892.pdf. [cited by applicant]
Schutijser C.J.T.M., “Comparing DDoS Mitigation Techniques,” Jan. 22, 2016, Univ. of Twente, Faculty of Electrical Engineering, Mathematics and Computer Science, entire document, http://referaat.cs.utwenle.nl/conference… [cited by applicant]
Srikanth, Kandula et al. “Botz-4-sale: Surviving Organized DDoS Attacks That Mimic Flash Crowds,” May 2005, In 2nd NSDI, 14 pages. [cited by applicant]
Wong, F., et al., “A Survey of Trends in Massive DDoS Attacks and Cloud-Based Mitigations,” International Journal of Network Security & Its Applications (IJNSA), vol. 6, No. 3, May 2014, pp. 57-71, http://airccse.org/jo… [cited by applicant]