Back to results
US 12,348,563 B2Granted
Domain squatting detection
AssigneePalo Alto Networks, Inc.
InventorsZhanhao Chen, Jun Wang, Daiping Liu
Life of this patent
Estimating the term…
Abstract
Detection of squatting domains is disclosed. A set of new fully qualified domain names (FQDNs) is received. The set of new FQDNs is analyzed to detect domain squatting by identifying a subset of the new FQDNs as candidate squatting domains. The candidate squatting domains are distributed to a security device/service.
Claims19
A system, comprising:
- a processor configured to:
- receive a set of new fully qualified domain names (FQDNs);
- analyze the set of new FQDNs to detect domain squatting by identifying a subset of the new FQDNs as candidate squatting domains;
- check whether a candidate squatting domain of the candidate squatting domains uses a same name server or a same autonomous system number (ASN) as a corresponding potential target domain;
- in response to a determination that the candidate squatting domain uses the same name server or the same ASN as the corresponding potential target domain, filter out the candidate squatting domain from the domain name registrant to obtain remaining candidate squatting domains;
- and
- distribute the remaining candidate squatting domains to a security device/service;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
6 more elements
A method, comprising:
- receiving, using a processor, a set of new fully qualified domain names (FQDNs);
- analyzing, using the processor, the set of new FQDNs to detect domain squatting by identifying a subset of the new FQDNs as candidate squatting domains;
- checking whether a candidate squatting domain of the candidate squatting domains uses a same name server or a same autonomous system number (ASN) as a corresponding potential target domain;
- in response to a determination that the candidate squatting domain uses the same name server or the same ASN as the corresponding potential target domain, filtering out the candidate squatting domain from the domain name registrant to obtain remaining candidate squatting domains;
- and
- distributing, using the processor, the remaining candidate squatting domains to a security device/service.
3 more elements
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- receiving a set of new fully qualified domain names (FQDNs);
- analyzing the set of new FQDNs to detect domain squatting by identifying a subset of the new FQDNs as candidate squatting domains;
- checking whether a candidate squatting domain of the candidate squatting domains uses a same name server or a same autonomous system number (ASN) as a corresponding potential target domain;
- in response to a determination that the candidate squatting domain uses the same name server or the same ASN as the corresponding potential target domain, filtering out the candidate squatting domain from the domain name registrant to obtain remaining candidate squatting domains;
- and
- distributing the remaining candidate squatting domains to a security device/service.
3 more elements
Dependencies are inferred from the claim text.