Back to results
US 11,108,797 B2Granted
Timely detection of network traffic to registered DGA generated domains
AssigneeStellar Cyber, Inc.
InventorsZhang Xu, Changming Liu
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
AssigneeStellar Cyber, Inc.
InventorsZhang Xu, Changming Liu
Estimating the term…
A non-transitory computer-readable medium having a program stored thereon that, when executed by one or more processors, directs a computing system to secure a communication network. The program comprises a traffic inspection engine, a domain generation algorithm (DGA) inspection engine, and a message bus communicationally coupling the traffic inspection engine and the DGA inspection engine. The traffic inspection engine is configured to identify if a traffic session containing a domain name system (DNS) request and/or response in a communication network includes a DGA generated domain and send information about the identified DGA generated domain to the DGA inspection engine via the message bus. The DGA inspection engine is configured to verify if the identified DGA generated domain is registered, and send information about the registered DGA domain to the traffic inspection engine via the message bus. The traffic inspection engine is further configured to inspect, using the information about the registered DGA generated domain, if a subsequent traffic session in the communication network contains the registered DGA generated domain.
A non-transitory computer-readable medium storing a program that, when executed by one or more processors, directs a computing system to secure a communication network, the program comprising:
A computer-implemented method, comprising:
A computing apparatus, comprising one or more processors and one or more memory devices having a program stored thereon that, when executed by the one or more processors, directs the computing apparatus to carry out operations to secure a computer network, the operations comprising:
Dependencies are inferred from the claim text.