Back to results
US 2026/0039677 A1Published application
Using a threat intelligence framework to populate a recursive dns server cache
AssigneeLevel 3 Communications, LLC
InventorsJohn R.B. Woodworth, Dean Ballew, Dan Luther, Mark Dehus
Life of this patent
Estimating the term…
Abstract
The present application describes systems and methods for populating a DNS cache of a recursive DNS server using information gathered by a threat intelligence system. The threat intelligence system may collect some or all DNS responses from one or more recursive DNS servers as the one or more DNS servers process various received requests. Since the threat intelligence engine has access to this DNS data, the DNS data may be used to seed a DNS cache of a recursive DNS server.
Claims18
A method, comprising:
- receiving, at a recursive DNS server, a trigger notification, the trigger notification indicating a domain name system (DNS) cache of the recursive DNS server is to be populated;
- requesting, by the recursive DNS server, access to a threat intelligence system, the threat intelligence system storing query-answer pairs associated with previously received queries;
- and
- populating, by the recursive DNS server, the DNS cache of the recursive DNS server with the query-answer pairs.
1 more element
A method, comprising:
- detecting, by a recursive domain name system (DNS) server, a trigger event associated with the DNS server;
- in response to detecting the trigger event, determining, by the recursive DNS server, whether the recursive DNS server has access to a cache of query-answer pairs;
- when it is determined that the recursive DNS server does not have access to the cache of query-answer pairs:
- providing, by a threat intelligence system, the recursive DNS server access query-answer pairs collected by the threat intelligence system;
- and
- populating, by the recursive DNS server, a DNS cache of the recursive DNS server with the query-answer pairs.
3 more elements
Dependencies are inferred from the claim text.