Back to results
US 8,898,773 B2Granted
Applianced domain name server
AssigneeNixu Software Oy
InventorsVille Kummu, Petri Aukia, Juha Holkkola
Life of this patent
Estimating the term…
Abstract
A software installation package for a domain name server (DNS) comprises a hardened operating system, a domain name server software, a management interface. To detect and block attack attempts (2-1), the software installation package also comprises an attack detection logic (ADS) for analyzing (2-2, 2-3) IP packets based on a set of attack detection rules. A response logic reacts (2-4) to detected attack attempts.
Claims9
A method for making an applianced domain name server, the method comprising:
- forming a software installation package for the domain name server;
- and
- making the appplianced domain name server by installing the software installation package in a server, wherein the software installation package comprises:
- a hardened operating system;
- a securely pre-configured domain name server software;
- a management interface;
- a local response logic for responding to attack attempts from one or more blacklisted client computers;
- a local attack detection logic, wherein the attack detection logic performs one or more analyses, each of which being based on a plurality of IP packets from an individual client computer, based on a predetermined set of attack detection rules,
- wherein, if at least some of the analyses, which are based on the plurality of IP packets from the individual client computer, identify the individual client computer as an attacking client computer, the local attack detection logic blacklists the individual client computer as an attacking client computer thereby indicating that IP traffic from the individual client computer should be blocked.
6 more elements
A software installation package for a domain name server, the software installation package comprising:
- a hardened operating system;
- a securely pre-configured domain name server software;
- a management interface;
- a local attack detection logic, wherein the attack detection logic performs one or more analyses, each of which being based on a plurality of IP packets from an individual client computer, based on a predetermined set of attack detection rules,
- wherein, if at least some of the analyses, which are based on the plurality of IP packets from the individual client computer, identify the individual client computer as an attacking client computer, the local attack detection logic blacklists the individual client computer as an attacking client computer thereby indicating that IP traffic from the individual client computer should be blocked, and
- wherein the software installation package is stored in a tangible software carrier that constitutes a non-transitory storage medium.
3 more elements
Dependencies are inferred from the claim text.