Back to results
US 12,081,512 B2Granted
Collecting passive DNS traffic to generate a virtual authoritative DNS server
AssigneeLevel 3 Communications, LLC
InventorsJohn R. Woodworth, Dean Ballew, Mark Dehus
Life of this patent
Estimating the term…
Abstract
The present application describes a system and method for passively collecting DNS traffic data as that data is passed between a recursive DNS resolver and an authoritative DNS server. The information contained in the collected DNS traffic data is used to generate a virtual authoritative DNS server, or a zone associated with the authoritative DNS server, when it is determined that the authoritative DNS server has been compromised.
Claims8
A method, comprising:
- capturing domain name system (DNS) data;
- receiving a trigger notification, the trigger notification indicating a zone associated with an authoritative DNS server is compromised;
- causing a recursive DNS resolver to retrieve last known valid information associated with the zone from an observer system, the last known valid information being captured from the DNS data;
- generating a virtual zone using the last known valid information;
- and
- causing the recursive DNS resolver to host the virtual zone.
3 more elements
Dependencies are inferred from the claim text.