| 发明名称 |
ZERO DAY THREAT DETECTION BASED ON FAST FLUX DETECTION AND AGGREGATION |
| 摘要 |
A method in a cloud-based security system includes operating a Domain Name System (DNS) resolution service, proxy, or monitor in the cloud-based security system; receiving DNS records with time-to-live (TTL) parameters; checking the TTL parameters for indication of a fast flux technique; and detecting domains performing the fast flux technique based on the DNS records. A cloud-based security system includes a plurality of nodes communicatively coupled to one or more users; and a Domain Name System (DNS) service providing a resolution service, proxy, or monitor in the cloud-based security system; wherein the DNS service is configured to receive DNS records with time-to-live (TTL) parameters; check the TTL parameters for indication of a fast flux technique; and detect domains performing the fast flux technique based on the DNS records. |
| 申请公布号 |
US2016036816(A1) |
申请公布日期 |
2016.02.04 |
| 申请号 |
US201414446836 |
申请日期 |
2014.07.30 |
| 申请人 |
SRINIVASAN Subbu |
发明人 |
SRINIVASAN Subbu |
| 分类号 |
H04L29/06;H04L12/733 |
主分类号 |
H04L29/06 |
| 代理机构 |
|
代理人 |
|
| 主权项 |
1. A method in a cloud-based security system, comprising:
operating a Domain Name System (DNS) resolution service, proxy, or monitor in the cloud-based security system; receiving DNS records with time-to-live (TTL) parameters; checking the TTL parameters for indication of a fast flux technique; and detecting domains performing the fast flux technique based on the DNS records. |
| 地址 |
Milpitas CA US |
