Back to results
US 2018/0295142 A1Published application
Extracted data classification to determine if a dns packet is malicious
AssigneeHewlett Packard Enterprise Development LP
InventorPratyusa K. Manadhata
Life of this patent
Estimating the term…
Abstract
Examples herein disclose an extraction of data from a payload field within a domain name system (DNS) packet, The extracted data is classified according to a level of risk associated with the extracted data. Based on the classification, the DNS packet may be determined as malicious.
Claims15
A method, executable by a computing device, the method comprising:
- extracting data from a payload field within a domain name system (DNS) packet;
- classifying the extracted data according to a level of risk associated with the extracted data;
- and
- determining whether the DNS packet is malicious based on the classification.
1 more element
A system comprising:
- an appliance that:
- processes a domain name system (DNS) packet to or from a DNS server;
- extracts data from a payload field within the DNS packet;
- classifies the extracted data according to a level of risk associated with the extracted data;
- and
- determines whether the DNS packet is malicious based on the classification.
3 more elements
A non-transitory machine-readable storage medium comprising instructions that when executed by a processing resource cause a computing device to:
- extract data from a payload field within a domain name system (DNS) packet;
- classify the extracted data according to a level of risk associated with the extracted data;
- and
- identify whether the DNS packet is malicious based on the classification of the level of risk;
- log the DNS packet based on the identification of the DNS packet as malicious.
2 more elements
Dependencies are inferred from the claim text.