Use case: Block DDoS attack

DDoS Attacks – Platform automatically mitigates attack

Description: this use case shows how the platform can identify an incoming DDoS attack and activate mitigation procedures.

Scenario: an incoming DDoS attack occurs and creates an overload on a webserver. If not mitigated it will cause services to go down and deny legitimate users access to resources.

Solution: model an Observer on the platform to enable overload detection. When the event occurs the platform will activate a so called “alert level” and execute the code associated to that specific level. Notification of the event will occur and when the attack is mitigated the alert level will be reset to normality.