System and method for dns misuse detection
AssigneeArbor Networks, Inc.
InventorsBrian St. Pierre, Sean O'Hara, Edmund J. Gurney, III
Life of this patent
Estimating the term…
Loading patent…
AssigneeArbor Networks, Inc.
InventorsBrian St. Pierre, Sean O'Hara, Edmund J. Gurney, III
Estimating the term…
A computer method and system for mitigating Domain Name System (DNS) misuse using a probabilistic data structure, such as a cuckoo filter. Intercepted is network traffic flowing from one or more external hosts to a computer network, the intercepted network traffic including a DNS request that requests a Resource Record name in a DNS zone file. A determination is made as to whether the DNS request is requesting resolution at a protected DNS Name Server. A hash value is calculated for the requested Resource Record name if it is determined the DNS request is requesting resolution at the protected DNS Name Server. A determination is then made as to whether the calculated hash value for the requested Resource Record name is present in the probabilistic data structure. The DNS request is forwarded to the protected server if the requested Resource Record name is determined present in the probabilistic data structure.
A method performed by a computer system having one or more processors and memory storing one or more programs for execution by the one or more processors for mitigating Domain Name System (DNS) misuse using a probabilistic data structure, the method comprising the steps of:
A computer system coupled to a computer network for mitigating Domain Name System (DNS) misuse using a probabilistic data structure, comprising:
Dependencies are inferred from the claim text.