发明名称 |
WHITE LISTING DNS TOP-TALKERS |
摘要 |
Systems and methods for creating a list of trustworthy resolvers in a domain name system. A computer receives a resolver profile for a resolver sending queries to a domain name server. The resolver profile is based on one or more of a top-talker status of the resolver, a normalcy of distribution of domain names queried, a continuity of distribution of query type, and an IP time-to-live variance of queries from the resolver. Resolver profiles can be compared to a trust policy to determine whether the resolver is trustworthy. Resolvers deemed trustworthy can be added to a list of trustworthy resolvers. Embodiments can detect the occurrence of a network-based attack. Embodiments can mitigate the effect of a network-based attack by responding only to queries from resolvers on the list of trustworthy resolvers.
|
申请公布号 |
US2013042299(A1) |
申请公布日期 |
2013.02.14 |
申请号 |
US201213572185 |
申请日期 |
2012.08.10 |
申请人 |
VERISIGN, INC.;OSTERWEIL ERIC;MCPHERSON DANNY |
发明人 |
OSTERWEIL ERIC;MCPHERSON DANNY |
分类号 |
G06F21/00 |
主分类号 |
G06F21/00 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|