Back to results
US 12,641,055 B2Granted
Collecting passive DNS traffic to generate a virtual authoritative DNS server
AssigneeLevel 3 Communications, LLC
InventorsJohn R. Woodworth, Dean Ballew, Mark Dehus
Life of this patent
Estimating the term…
Abstract
The present application describes a system and method for passively collecting DNS traffic data as that data is passed between a recursive DNS resolver and an authoritative DNS server. The information contained in the collected DNS traffic data is used to generate a virtual authoritative DNS server, or a zone associated with the authoritative DNS server, when it is determined that the authoritative DNS server has been compromised.
Claims6
A method, comprising:
- passively capturing domain name system (DNS) data;
- detecting a trigger event associated with an authoritative DNS server;
- in response to detecting the trigger event:
- causing a recursive DNS resolver to retrieve last known valid information associated with a zone from an observer system, the last known valid information being associated with the passively captured DNS data;
- and
- causing the recursive DNS resolver to use the passively captured DNS data to provide an answer to a query received from a remote computing device;
- generating a virtual authoritative DNS server using the passively captured DNS data;
- and
- causing the recursive DNS resolver to host the virtual authoritative DNS server.
6 more elements
Dependencies are inferred from the claim text.