Strategically aged domain detection
AssigneePalo Alto Networks, Inc.
InventorsZhanhao Chen, Daiping Liu, Wanjin Li, Fan Fei
Life of this patent
Estimating the term…
Abstract
Detection of strategically aged domains is detected. A list of aged dormant domains is determined, including by evaluating passive Domain Name System (DNS) information. The list of aged dormant domains is monitored for a change by an aged dormant domain from a dormant domain status to an active status. In response to determining the change to active status of the aged dormant domain, an action is taken with respect to the aged dormant domain.
Claims13
A system, comprising:
- a processor configured to:
- determine a list of aged dormant domains, including by evaluating passive Domain Name System (DNS) information;
- monitor the list of aged dormant domains for a change by an aged dormant domain from a dormant status to an active status;
- and
- in response to determining the change to active status of the aged dormant domain, take an action with respect to the aged dormant domain;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- determining a list of aged dormant domains, including by evaluating passive Domain Name System (DNS) information;
- monitoring the list of aged dormant domains for a change by an aged dormant domain from a dormant status to an active status;
- and
- in response to determining the change to active status of the aged dormant domain, taking an action with respect to the aged dormant domain.
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- determining a list of aged dormant domains, including by evaluating passive Domain Name System (DNS) information;
- monitoring the list of aged dormant domains for a change by an aged dormant domain from a dormant status to an active status;
- and
- in response to determining the change to active status of the aged dormant domain, taking an action with respect to the aged dormant domain.
Dependencies are inferred from the claim text.