EXTRACTED DATA CLASSIFICATION TO DETERMINE IF A DNS PACKET IS MALICIOUS

摘要

Examples herein disclose an extraction of data from a payload field within a domain name system (DNS) packet. The extracted data is classified according to a level of risk associated with the extracted data. Based on the classification, the DNS packet may be determined as malicious.