APPARATUS AND METHOD FOR IDENTIFYING A DOMAIN NAME SYSTEM RESOURCE EXHAUSTION ATTACK

摘要

A machine includes a processor and a memory connected to the processor. The memory stores instructions executed by the processor to identify a resource attack in response to spikes in the number of unique subdomains being queried and spikes in the number of timeouts or delayed responses from a specified name server.