Method and apparatus for detecting anomalies of a DNS traffic

Method and apparatus for detecting anomalies of a DNS traffic

The present invention relates to a method and an apparatus for detecting anomalies of a DNS traffic in a network comprising analysing, through a network analyser connected to said network, each data packets exchanged in the network, isolating, through the network analyser, from each of the analysed...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Patrone, Fabio, Di Pinto, Alessandro, Carullo, Moreno, Marchese, Mario, Carcano, Andrea, Fausto, Alessandro, Gaggero, Giovanni Battista
Format: Patent
Sprache:eng
Schlagworte:
ELECTRIC COMMUNICATION TECHNIQUE
ELECTRICITY
TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page
container_issue
container_start_page
container_title
container_volume
creator Patrone, Fabio
Di Pinto, Alessandro
Carullo, Moreno
Marchese, Mario
Carcano, Andrea
Fausto, Alessandro
Gaggero, Giovanni Battista
description The present invention relates to a method and an apparatus for detecting anomalies of a DNS traffic in a network comprising analysing, through a network analyser connected to said network, each data packets exchanged in the network, isolating, through the network analyser, from each of the analysed data packets the related DNS packet, evaluating, through a computerized data processing unit, each of the DNS packets generating a DNS packet status, signaling, through the computerized data processing unit, an anomaly of the DNS traffic when the DNS packet status defines a critical state, wherein the evaluating further comprises assessing, through the computerized data processing unit, each of the DNS packet by a plurality of evaluating algorithms generating a DNS packet classification for each of the evaluating algorithms, aggregating, through the computerized data processing unit, the DNS packet classifications generating the DNS packet status, and wherein the critical state is identified when the DNS packet status is comprised in a critical state database stored in a storage medium.
format Patent
fullrecord <record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_US11722504B2</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>US11722504B2</sourcerecordid><originalsourceid>FETCH-epo_espacenet_US11722504B23</originalsourceid><addsrcrecordid>eNrjZLD1TS3JyE9RSMwD4oKCxKLEktJihbT8IoWU1JLU5JLMvHSgXH5uYk5marFCfppCooKLX7BCSVFiWlpmMg8Da1piTnEqL5TmZlB0cw1x9tBNLciPTy0uSExOzUstiQ8NNjQ0NzIyNTBxMjImRg0Az2Yveg</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>Method and apparatus for detecting anomalies of a DNS traffic</title><source>esp@cenet</source><creator>Patrone, Fabio ; Di Pinto, Alessandro ; Carullo, Moreno ; Marchese, Mario ; Carcano, Andrea ; Fausto, Alessandro ; Gaggero, Giovanni Battista</creator><creatorcontrib>Patrone, Fabio ; Di Pinto, Alessandro ; Carullo, Moreno ; Marchese, Mario ; Carcano, Andrea ; Fausto, Alessandro ; Gaggero, Giovanni Battista</creatorcontrib><description>The present invention relates to a method and an apparatus for detecting anomalies of a DNS traffic in a network comprising analysing, through a network analyser connected to said network, each data packets exchanged in the network, isolating, through the network analyser, from each of the analysed data packets the related DNS packet, evaluating, through a computerized data processing unit, each of the DNS packets generating a DNS packet status, signaling, through the computerized data processing unit, an anomaly of the DNS traffic when the DNS packet status defines a critical state, wherein the evaluating further comprises assessing, through the computerized data processing unit, each of the DNS packet by a plurality of evaluating algorithms generating a DNS packet classification for each of the evaluating algorithms, aggregating, through the computerized data processing unit, the DNS packet classifications generating the DNS packet status, and wherein the critical state is identified when the DNS packet status is comprised in a critical state database stored in a storage medium.</description><language>eng</language><subject>ELECTRIC COMMUNICATION TECHNIQUE ; ELECTRICITY ; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION</subject><creationdate>2023</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20230808&amp;DB=EPODOC&amp;CC=US&amp;NR=11722504B2$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,308,776,881,25543,76293</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20230808&amp;DB=EPODOC&amp;CC=US&amp;NR=11722504B2$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>Patrone, Fabio</creatorcontrib><creatorcontrib>Di Pinto, Alessandro</creatorcontrib><creatorcontrib>Carullo, Moreno</creatorcontrib><creatorcontrib>Marchese, Mario</creatorcontrib><creatorcontrib>Carcano, Andrea</creatorcontrib><creatorcontrib>Fausto, Alessandro</creatorcontrib><creatorcontrib>Gaggero, Giovanni Battista</creatorcontrib><title>Method and apparatus for detecting anomalies of a DNS traffic</title><description>The present invention relates to a method and an apparatus for detecting anomalies of a DNS traffic in a network comprising analysing, through a network analyser connected to said network, each data packets exchanged in the network, isolating, through the network analyser, from each of the analysed data packets the related DNS packet, evaluating, through a computerized data processing unit, each of the DNS packets generating a DNS packet status, signaling, through the computerized data processing unit, an anomaly of the DNS traffic when the DNS packet status defines a critical state, wherein the evaluating further comprises assessing, through the computerized data processing unit, each of the DNS packet by a plurality of evaluating algorithms generating a DNS packet classification for each of the evaluating algorithms, aggregating, through the computerized data processing unit, the DNS packet classifications generating the DNS packet status, and wherein the critical state is identified when the DNS packet status is comprised in a critical state database stored in a storage medium.</description><subject>ELECTRIC COMMUNICATION TECHNIQUE</subject><subject>ELECTRICITY</subject><subject>TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2023</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNrjZLD1TS3JyE9RSMwD4oKCxKLEktJihbT8IoWU1JLU5JLMvHSgXH5uYk5marFCfppCooKLX7BCSVFiWlpmMg8Da1piTnEqL5TmZlB0cw1x9tBNLciPTy0uSExOzUstiQ8NNjQ0NzIyNTBxMjImRg0Az2Yveg</recordid><startdate>20230808</startdate><enddate>20230808</enddate><creator>Patrone, Fabio</creator><creator>Di Pinto, Alessandro</creator><creator>Carullo, Moreno</creator><creator>Marchese, Mario</creator><creator>Carcano, Andrea</creator><creator>Fausto, Alessandro</creator><creator>Gaggero, Giovanni Battista</creator><scope>EVB</scope></search><sort><creationdate>20230808</creationdate><title>Method and apparatus for detecting anomalies of a DNS traffic</title><author>Patrone, Fabio ; Di Pinto, Alessandro ; Carullo, Moreno ; Marchese, Mario ; Carcano, Andrea ; Fausto, Alessandro ; Gaggero, Giovanni Battista</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_US11722504B23</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>eng</language><creationdate>2023</creationdate><topic>ELECTRIC COMMUNICATION TECHNIQUE</topic><topic>ELECTRICITY</topic><topic>TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION</topic><toplevel>online_resources</toplevel><creatorcontrib>Patrone, Fabio</creatorcontrib><creatorcontrib>Di Pinto, Alessandro</creatorcontrib><creatorcontrib>Carullo, Moreno</creatorcontrib><creatorcontrib>Marchese, Mario</creatorcontrib><creatorcontrib>Carcano, Andrea</creatorcontrib><creatorcontrib>Fausto, Alessandro</creatorcontrib><creatorcontrib>Gaggero, Giovanni Battista</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>Patrone, Fabio</au><au>Di Pinto, Alessandro</au><au>Carullo, Moreno</au><au>Marchese, Mario</au><au>Carcano, Andrea</au><au>Fausto, Alessandro</au><au>Gaggero, Giovanni Battista</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>Method and apparatus for detecting anomalies of a DNS traffic</title><date>2023-08-08</date><risdate>2023</risdate><abstract>The present invention relates to a method and an apparatus for detecting anomalies of a DNS traffic in a network comprising analysing, through a network analyser connected to said network, each data packets exchanged in the network, isolating, through the network analyser, from each of the analysed data packets the related DNS packet, evaluating, through a computerized data processing unit, each of the DNS packets generating a DNS packet status, signaling, through the computerized data processing unit, an anomaly of the DNS traffic when the DNS packet status defines a critical state, wherein the evaluating further comprises assessing, through the computerized data processing unit, each of the DNS packet by a plurality of evaluating algorithms generating a DNS packet classification for each of the evaluating algorithms, aggregating, through the computerized data processing unit, the DNS packet classifications generating the DNS packet status, and wherein the critical state is identified when the DNS packet status is comprised in a critical state database stored in a storage medium.</abstract><oa>free_for_read</oa></addata></record>
fulltext fulltext_linktorsrc
identifier
ispartof
issn
language eng
recordid cdi_epo_espacenet_US11722504B2
source esp@cenet
subjects ELECTRIC COMMUNICATION TECHNIQUE
ELECTRICITY
TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION
title Method and apparatus for detecting anomalies of a DNS traffic
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-01-25T16%3A38%3A49IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=Patrone,%20Fabio&rft.date=2023-08-08&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3EUS11722504B2%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true