Back to results
US 2024/0205240 A1Published application
Real-time detection of dns infiltration traffic
AssigneePalo Alto Networks, Inc.
InventorsRuian Duan, Daiping Liu, Tingxiang Zhu, Xing Wang, Jun Wang
Life of this patent
Estimating the term…
Abstract
Real-time detection of DNS infiltration traffic is disclosed. A DNS response associated with a DNS query sent by a client device is received. An attempted DNS infiltration is detected based at least in part on an automated analysis of the DNS response. In response to the detection, a remedial action is performed.
Claims20
A system, comprising:
- a processor configured to:
- receive a DNS response associated with a DNS query sent by a client device;
- detect an attempted DNS infiltration based at least in part on an automated analysis of the DNS response;
- and
- in response to the detection, perform a remedial action;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
4 more elements
A method, comprising:
- receiving a DNS response associated with a DNS query sent by a client device;
- detecting an attempted DNS infiltration based at least in part on an automated analysis of the DNS response;
- and
- in response to the detection, performing a remedial action.
1 more element
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- receiving a DNS response associated with a DNS query sent by a client device;
- detecting an attempted DNS infiltration based at least in part on an automated analysis of the DNS response;
- and
- in response to the detection, performing a remedial action.
1 more element
Dependencies are inferred from the claim text.