Method, device and system for detecting domain name system (DNS) black hole hijack

A black hole, IP address technology, applied in the field of information security, can solve problems such as user interference and user disgust, and achieve the effect of avoiding interference

Active Publication Date: 2013-01-09
三六零数字安全科技集团有限公司
View PDF5 Cites 16 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, this kind of advertisement or navigation page...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method, device and system for detecting domain name system (DNS) black hole hijack
  • Method, device and system for detecting domain name system (DNS) black hole hijack
  • Method, device and system for detecting domain name system (DNS) black hole hijack

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0052] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. All other embodiments obtained by persons of ordinary skill in the art based on the embodiments of the present invention belong to the protection scope of the present invention.

[0053]In order to avoid conceptual confusion, the first thing to explain is that although DNS black holes appear to be web pages, technically speaking, this behavior is still based on the step of DNS resolution, but it is also related to DNS hijacking. different. That is to say, DNS black hole, DNS black hole hijacking, DNS hijacking, etc. are all different concepts, which are briefly introduced below.

[0054] The so-called "webpage hijacking" or "page hijacking" means that the machine acce...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method, a device and a system for detecting domain name system (DNS) black hole hijack. The method comprises the following steps of: capturing hyper text transfer protocol (HTTP) connection data packets corresponding to webpage access requests in a network, extracting domain names and Internet protocol (IP) addresses which correspond to webpages in the data packets, and recording the corresponding relationships between the domain names and the IP addresses; counting captured results, and acquiring the quantity of different domain names corresponding to the same IP address; determining IP addresses which are used for performing black hole hijack according to the quantity of the different domain names corresponding to the same IP address, and storing the IP addresses which are used for performing the DNS black hole hijack; when the webpage access request of a user generates the current HTTP connection data packet, extracting an IP address in the current HTTP connection data packet; and if the extracted IP address appears in the stored IP addresses which are used for performing the DNS black hole hijack, determining that the webpage access request is subjected to the DNS black hole hijack. By the method, the device and the system, the phenomenon that the user is disturbed by a DNS black hole hijack webpage is avoided.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method, device and system for detecting DNS black hole hijacking. Background technique [0002] With the popularization of the Internet, users have more and more demands on the network. The most common way for ordinary users to access network sites is through domain names, and what the machine can actually read is the IP address of the host. At this time, a domain name resolution problem will be involved, which requires the use of DNS ( Domain Name System, Computer Domain Name System). DNS is made up of resolvers and domain name servers. Wherein, the domain name server refers to a server that saves the domain names and corresponding IP addresses of all hosts in the network, and has the function of converting domain names into IP addresses. Through DNS, people can access the Internet more conveniently, without having to remember the IP address digital string that...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/12H04L29/08
Inventor 刘海粟张聪颜高权
Owner 三六零数字安全科技集团有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap