Back to results
US 2023/0308414 A1Published application
Collecting passive dns traffic to generate a virtual authoritative dns server
AssigneeLevel 3 Communications, LLC
InventorsJohn R. Woodworth, Dean Ballew, Mark Dehus
Life of this patent
Estimating the term…
Abstract
The present application describes a system and method for passively collecting DNS traffic data as that data is passed between a recursive DNS resolver and an authoritative DNS server. The information contained in the collected DNS traffic data is used to generate a virtual authoritative DNS server, or a zone associated with the authoritative DNS server, when it is determined that the authoritative DNS server has been compromised.
Claims16
A method, comprising:
- capturing domain name system (DNS) data;
- receiving a trigger notification, the trigger notification indicating a zone associated with an authoritative DNS server is compromised;
- causing a recursive DNS resolver to retrieve last known valid information associated with the zone from an observer system, the last known valid information being captured from the DNS data;
- generating a virtual zone using the last known valid information;
- and
- causing the recursive DNS resolver to host the virtual zone.
3 more elements
A method, comprising:
- passively capturing domain name system (DNS) data;
- detecting a trigger event associated with an authoritative DNS server;
- in response to detecting the trigger event:
- causing the recursive DNS resolver to retrieve last known valid information associated with a zone from an observer system, the last known valid information being associated with the passively captured DNS data;
- and
- causing the recursive DNS resolver to use the passively captured DNS data to provide an answer to a query received from a remote computing device.
3 more elements
Dependencies are inferred from the claim text.