472 results about "Domain Name System" patented technology

Some embodiments enhance the security of domain name resolution and other DNS operations, by automatically intercepting the DNS operation, determining an associated device identity or ascertaining an associated user identity, and enforcing a security policy based on at least the DNS operation and based on at least one of the identities. Some securable DNS operations include resolution requests, reverse lookups from IP addresses to domain names, DNS record accesses, mail server mappings, redirection, forwarding, and DNS record cache operations. Enforcing the policy includes, e.g., preventing a result requested by the DNS operation, permitting computational progress toward the requested result, allowing a different result, modifying a DNS record, or flushing a DNS record from a cache. In some embodiments, DNS operation security functionality utilizes or implements a conditional access security functionality, thereby providing, e.g., a secure conditional domain name resolution.

In a technique for directing network traffic to distribute client service requests among a set of service clusters of a service network, capacity and performance information is regularly obtained for the service clusters and provided to a trained reinforcement-learning (RL) model that integrates learned request-distribution and reward information for the service network. The RL model is operated to regularly update recommendation values for directing the client service requests to the service clusters, and updated recommendation values are regularly provided to a traffic director which directs network traffic at least partly based on the regularly provided updated recommendation values. The traffic director may be realized by a Domain Name System (DNS) server, having an ability to select among candidate service clusters based on weight values reported by the RL model.

Techniques for detecting and protecting claimable non-existent domains are disclosed. A system, process, and / or computer program product for detecting and protecting claimable non-existent domains includes monitoring network activity using a network security device, detecting that a session is querying a claimable non-existent domain using a domain name system (DNS) security service, and performing an action in response to the session querying the claimable non-existent domain.

The invention provides a method and a device for managing computing power identification and resource description based on a domain name system. Wherein the computing power identifier comprises a computing power node identifier and a computing power resource identifier, the computing power identifier is used for identifying basic static information of the computing power resource, and the resource description file is used for identifying dynamic description information of the computing power resource. According to the method, the computing power identification and the resource description information based on the domain name are fully utilized, and the domain name infrastructure, the related system and the operation mechanism are combined, so that compatible use of different types of computing power resource identifications can be realized, and meanwhile, the consistency and the accuracy of the computing power identification in the wide area network range are improved.

A route selection method for an Edge Application Server (EAS) is provided, the method is performed by a terminal, and includes: receiving a Domain Name System (DNS) information indication sent by a first network function; executing a DNS policy decision based on the DNS information indication; and sending a DNS query request to a second network function based on the decision, where the DNS query request is used to request the second network function to select an EAS.

The invention relates to a DevOps-oriented containerized test environment deployment system and method, and belongs to the technical field of Internet. A multi-service test environment is defined through a YAML file, environment variables are managed in combination with an. Env configuration file, dependency is optimized through dependency layering and a cache library, a container mirror image is constructed, and a container cluster is started; managing multiple tasks through a centralized scheduling architecture, and realizing resource isolation of a container cluster by using Cgroup; adjusting the number of container instances in real time based on a capacity expansion and contraction mechanism; a bridging network is used for automatically distributing a container IP, a built-in domain name system analyzes a service name dynamic discovery service, and rapid reconstruction of a containerized test environment is achieved. According to the method, a YAML and environment variable separation mechanism is adopted, real-time loading of development, testing and production environment configuration is supported, the deployment time is shortened to the second level, the resource utilization rate is increased to 90% from 60%, the multi-service communication difference is eliminated, and efficient interconnection between containers is ensured.

The invention discloses a multi-modal attack identification method fusing BMama and difference to guide trans-attention, which comprises the following steps: simulating a false data injection attack, a denial of service attack, an address resolution protocol spoofing attack and a domain name system spoofing attack, collecting physical layer sensor data and network layer flow data, and preprocessing multi-modal data; bMama is constructed to perform dynamic time modeling on multi-modal data, a graph neural network is combined to adversariate a variational auto-encoder, features of a power grid system topology and a communication topology structure are fused, and robustness of potential representation is enhanced through adversarial training; the method comprises the following steps of: guiding feature complementary fusion by using modal difference through a difference guide iteration cross-attention fusion mechanism, improving the capability of distinguishing complex attacks, finally carrying out attack detection and classification on fused modals, and executing end-to-end optimization according to a weighted combination of loss of each part. The method can effectively detect and classify the multi-modal attack in the smart power grid, and enhances the safety and reliability of a complex system.

Method and apparatus for improvement of DNS configuration for applications are disclosed. A method performed at a server comprises generating Domain Name System (DNS) information; deciding whether to transmit the DNS information to a User Equipment (UE) or to a network or to both the UE and the network; and transmitting the DNS information for use with at least one application associated with the UE according to the decision.

A node according to an embodiment disclosed in the present document may store instructions which cause the node to: detect a network access event through an access control application; transmit a domain name system (DNS) query request packet to a first external server through the access control application; receive a DNS query result from the first external server, wherein the DNS query result includes domain information and IP information; and transmit a domain validation request or a network access request including the domain information to a second external server on the basis of whether a data 10 flow corresponding to the IP information exists, through the access control application.

Examples of the present disclosure describe systems and methods for zero trust domain name system (DNS) (ZTDNS) based networking. A computing device implementing ZTDNS based networking blocks any outbound connections that are not included in a list of trusted IP addresses. The list of trusted IP addresses is updated in response to the computing device receiving from a trusted DNS server an IP address corresponding to a DNS request. In some examples, the ZTDNS based networking intercepts and evaluates outbound communications for applications that implement a custom application DNS client. In other examples, the ZTDNS based networking intercepts and evaluates outbound communications for virtual environments. The outbound communications for both the custom application DNS client and the virtual environments are proxied through a local DNS client of the computing device.

The invention discloses a vehicle-mounted intelligent system module network card establishing method, device and equipment and a storage medium, and relates to the technical field of automobile communication, and the vehicle-mounted intelligent system module network card establishing method comprises the steps: sending dialing data to a target communication base station, so that the target communication base station feeds back an initial callback signal; obtaining the initial callback signal, and determining an establishment state of a network card according to the initial callback signal; and when the establishment state is successful, analyzing the target domain name system to realize network access, and completing the establishment of the network card. According to the invention, by accurately controlling the dialing process and domain name resolution, the stability and reliability of vehicle network connection are significantly improved, and the network performance of the vehicle is optimized.

Systems, methods, and related technologies for analyzing traffic are described. In certain aspects, network traffic is analyzed and a domain name system (DNS) message is extracted from the network traffic. Subsequent network traffic is monitored and analyzed based on the DNS message and in view of one or more criteria. In response to the one or more criteria being satisfied, an indication of compromise (IoC) for a device is determined.

In some implementations, a domain name system (DNS) server may receive, from a user equipment (UE), a DNS request message that indicates location information. The DNS server may select a node for the UE based on the location information. The DNS server may transmit, to the UE, an indication of the node.

Systems and methods for implemented by a user device for Real User Monitoring (RUM) include operating an add on for a web browser; receiving a list of domains or Uniform Resource Locators (URLs) to calculate RUM data thereon; responsive to the web browser accessing any of the domains or URLs in the list, calculating and storing RUM data; and periodically sending the stored RUM data to a cloud-based system. The RUM data can include statistics, metrics, and errors that are detected based on any of start of navigation, redirects, Domain Name System (DBS), connection establishment and teardown, Hypertext Transfer Protocol (HTTP) request and response start and end, Document Object Model (DOM) load time, page load time, and Java Script and AJAX error detection.

The present disclosure relates to Edge Computing enhancements by provisioning applications with mobile network provided Domain Name System (DNS) settings. In one embodiment, a method performed by a User Equipment (UE), which supports an Edge Application Server (EAS) discovery procedure with an Edge Application Server Discovery Function (EASDF), includes receiving a DNS setting provided by a mobile network, and storing a first copy of the DNS setting provided by the mobile network as a first DNS setting and a second copy of the DNS setting provided by the mobile network. Herein, the stored first DNS setting is not impacted by any changes made to the second copy of the DNS setting provided by the mobile network.

The attack vectors for some denial-of-service cyber attacks on the Internet's Domain Name System (DNS) are bad, bogus, or unregistered domain name DNS requests to resolve domain names that are not registered in the DNS. Some other cyber attacks steal sensitive data by encoding the data in bogus domain names, or domain names otherwise not registered in the DNS, that are transferred across networks in bogus DNS requests. A DNS gatekeeper may filter in-transit packets containing DNS requests and may efficiently determine if a request's domain name is registered in the DNS. When the domain name is not registered in the DNS, the DNS gatekeeper may take one of a plurality of protective actions. The DNS gatekeeper drops requests determined not to be legitimate, which may prevent an attack.

This disclosure describes example techniques for automatically configuring domain name system (DNS) servers to handle custom hostnames assigned to hosted zones. The techniques monitor DNS record sets of the hosted zones for special DNS records registering new hostnames. When such a special DNS record is detected, the central DNS server checks a database to see if that hostname is already assigned to another hosted zone. If the hostname is not assigned to another hosted zone, the central DNS server automatically updates its own DNS configuration data pair the new hostname with the Internet Protocol (IP) address of the hosted zone requesting the hostname. This allows the central DNS server to resolve future DNS queries for the new hostname by routing requests to the proper zone.

The invention provides a computing power identifier registration and management method based on a domain name system, and the method comprises the steps: 1, enabling a computing power resource node to transmit identity information and computing power information to a computing power resource management node based on the domain name system, and applying for the registration of a computing power identifier; step 2, the computing power resource management node allocates a corresponding computing power identifier to the computing power resource node according to the identity information and the computing power information, and generates a resource description file corresponding to the computing power identifier; wherein the computing power resource management node locally manages the computing power identifier, and the computing power resource management node locally manages the resource description file. According to the method, unified management of various heterogeneous computing power resources is realized in a form of combining computing power resource identifiers, node identifiers and description files, a unified computing power identifier registration and management system compatible with various computing power resources is constructed, and unified service of cross-domain multi-type computing power resources is further supported.

In response to intercepting (106), by a customer-premises equipment, CPE, a connection request from a connected device to an external encrypted domain name system, DNS, server, blocking (108), by the CPE, the connection request to cause the connected device to fall back to a use of an unencrypted DNS. And, in response to intercepting (110), by the CPE, an unencrypted DNS query from the connected device, performing (124), by the CPE, a cybersecurity operation related to the unencrypted DNS query.

The present disclosure relates generally to an SDN providing DNS resolution for a non-SDN service. In particular, the SDN hosts a first endpoint communicatively coupled with the non-SDN service. The SDN also hosts a DNS proxy in support of a second private network of a customer. A second endpoint of the customer can be accessible via the second private network The non-SDN service can send a DNS resolution request (that includes, for example, an FQDN of the second endpoint) to the first endpoint. The first endpoint forwards this request to the DNS proxy. In turn, the DNS proxy determines the IP address of the second endpoint and returns a reserved IP address corresponding to the DNS proxy and mapped to the second endpoint's IP address. The first endpoint sends this DNS resolution to the non-SDN service that then learns that the FQDN is resolved to the reserved IP address.

Anycast addressing is utilized to support the connection of multiple application connectors fronting an application(s) to a network element and anycast routing of network traffic destined for the application(s). When an application is indicated for onboarding in a tenant's network fabric, a network controller allocates virtual and anycast addresses to the application. Allocation of anycast addresses is per domain name and port / protocol combination. Upon determining that the application is available, the application connector(s) advertises reachability of the application via the anycast address. The network controller orchestrates configuration of a domain name system entry that resolves the application name to its virtual Internet Protocol (IP) address and destination network address translation rules that translate the virtual IP address to the anycast address and the anycast address to the application's private IP address. Application network traffic can thus be forwarded to the application via any application connector that advertised the anycast address.

Embodiments of systems and methods for DNS leak prevention and protection are disclosed herein. In particular, certain embodiments include a local DNS protection agent installed on a system and an associated trusted external DNS protection server. The DNS protection agent prevents DNS leaks from applications on the system such that all DNS requests from the system are confined to requests from the DNS protection agent to the associated DNS protection server. As the DNS leak prevention provided by the DNS protection agent stops applications on the system from circumventing the DNS protection server, all DNS requests originating from the system remain under the control of the DNS protection server and thus desired DNS protection (e.g., as implemented on the DNS protection server) may be maintained. Certain embodiments prevent applications from using certain DNS security protocols, such as DoH and DoT, without going through the DNS protection agent.

The present disclosure relates to method and apparatus for selecting an edge application server, and element network device, user equipment and storage medium. The method includes: a user equipment receiving first indication information, which is sent by an SMF, wherein the first indication information is used for indicating the priority of domain name system (DNS) information; and the user equipment making a DNS policy decision according to the first indication information, and sending a DNS query request to an EASDF, wherein the DNS query request is used by the EASDF to execute the discovery or selection of an edge application server (EAS).

Disclosed herein are a communication technique for merging, with an IoT technology, a 5G communication system for supporting a data transmission rate higher than that of a 4G system; and a system therefor.Embodiments herein disclose a method of protecting sensitive user plane traffic in an User Equipment (UE) (100), the method comprising: transmitting, to a network (200), by the UE (100) a first NAS message comprising an indicator indicating that the UE (200) supports of a secure channel for domain name system (DNS); receiving, from the network (200), by the UE (100) a second NAS message including DNS server security information in response to transmitting the first NAS message; and transmitting, to the network (200), by the UE (100) the DNS over the secure channel based on the DNS server security information.

Techniques and devices are described for communicating domain name system zone metadata to dynamic nameserver proxies. A method can include signing service receiving a first request for a resource record (RR). The signing service can transmit to a backend unit, a domain name system (DNS) query for information associated with a subdomain. The signing service can receive, from the backend unit of the computing system, a first DNS response comprising the information associated with the subdomain. The signing service can determine whether the information comprises a flagged nameserver record. The signing service can generate a second DNS response, content of the DNS response based at least in part on whether the information associated with the subdomain comprises the flagged nameserver record. The signing service can transmit the second DNS response to the DNS resolver.

A system to distinguish internal network routing issues within a user plane function (UPF) from external routing issues via multi-domain system (DNS) servers probing is disclosed. The system determines latency in communication between a given UPF and each of a plurality of DNS servers. The system compares each latency with a threshold latency value. If it is determined that each of the latencies in communication between the UPF and each DNS server is more than the threshold latency values, the system may determine that there is an internal network routing issue at the UPF that caused the high latencies. If it is determined that a latency in communication between the UPF and a particular DNS server is more than the threshold latency value, the system may determine that the latency is caused by a network routing issue at the particular DNS server—which is external to the UPF.

Embodiments of systems and methods for DNS leak prevention and protection are disclosed herein. In particular, certain embodiments include a local DNS protection agent installed on a system and an associated trusted external DNS protection server. The DNS protection agent prevents DNS leaks from applications on the system such that all DNS requests from the system are confined to requests from the DNS protection agent to the associated DNS protection server. As the DNS leak prevention provided by the DNS protection agent stops applications on the system from circumventing the DNS protection server, all DNS requests originating from the system remain under the control of the DNS protection server and thus desired DNS protection (e.g., as implemented on the DNS protection server) may be maintained. Certain embodiments prevent applications from using certain DNS security protocols, such as DoH and DoT, without going through the DNS protection agent.

A method in a virtual private network (VPN) environment is disclosed. A user device transmits, to a VPN server before establishment of a VPN connection between the user device and the VPN server, an initiation request to establish the VPN connection. The initiation request includes remote content information indicating remote content that is unavailable in a geographic location of the user device. The user device receives, from the VPN server after establishment of the VPN connection, the remote content based at least in part on a configuration of domain name services (DNS) settings associated with the VPN connection to utilize a remote DNS server that is capable of obtaining the remote content. Various other aspects are contemplated.

The present application provides a method and device for sending a domain name system request, which relates to the field of communication technology and can improve the efficiency of domain name system DNS resolution. The method includes: a terminal device determines the address of a first DNS server corresponding to a first application. The terminal device determines the first address of the terminal device based on the address of the first DNS server and the address of the terminal device corresponding to the address of the first DNS server. Afterwards, the terminal device sends DNS request information. The DNS request information includes an identifier of the first application, the address of the first DNS server, and the first address of the terminal device.

The invention relates to the technical field of data security, and discloses a vehicle data cross-border flow detection method, device and system, a medium and a program, and the method comprises the steps: controlling a detected vehicle to run each application program installed in the vehicle; in the running process of each application program, obtaining a network data message generated by the tested vehicle; identifying based on the network data message to obtain a network layer data packet and a domain name system data packet; and after determining that the tested vehicle has data cross-border flow based on the attribution information of the first internet protocol address in the network layer data packet, obtaining cross-border flow information of the tested vehicle data according to the first internet protocol address and the domain name system data packet. According to the invention, it is ensured that the detected vehicle can be comprehensively detected, the detection efficiency and accuracy can be improved, detailed cross-border flow information can be output after it is detected that data cross-border flow exists in the vehicle, a developer can conveniently check and rapidly position the problem, and the risk of data leakage is reduced.