64 results about "Hostname" patented technology

A centralized network traffic monitoring and intrusion detection system (1) comprising a system log aggregation module (110) including a means for receiving (111), a means for decoding (112) the user's syslog, a means for comparing (113) the data from the means for decoding, and a means for indexing (114) the tagged data and storing the indexed data. The system (1) also comprises an analysis and alert module (120) including a means for fetching (121) the indexed data, a means for checking and correlating (122) the retrieved indexed data, a means for analysing (123) the checked and correlated data, a means for compiling (124) the analysed and prioritized data and generating a report, and a means for alerting (124). The system (1) further includes a Bad IP Feed module (130) including a means for generating (131) updated lists of bad IP addresses and hostnames and automatically updating a user's network devices.

A system can receive an untrusted onboard announcement message from a remote computer. The system can, based on the untrusted onboard announcement message, initiate an onboarding service policy to verify a device location claims policy associated with the remote computer. The system can receive an indication of a remote access controller hardware component of the remote computer, wherein the indication is of verifying a network port authentication policy applicable to determine whether a port-based network access control protocol certificate hostname that is associated with the remote computer matches an entity attestation token attribute extensible authentication protocol-transport layer platform certificate hostname of the remote access controller hardware component to determine a network authentication status. The system can determine whether device onboard location is successful based on a device location verification policy status and the indication.

The present invention relates to a cybersecurity system for preventing adversarial reconnaissance in cloud, hybrid, and multi-cloud environments by dynamically modifying user authentication identifiers, hostnames and fully qualified domain names. The system updates login usernames in real time using randomized, non-repeating values generated from a configurable dictionary. Updates occur at scheduled, random, coordinated, or event-triggered intervals to disrupt profiling and targeting attempts. When identifiers are changed, associated sessions and tokens are invalidated to prevent reuse. The system monitors expired credential usage to detect potential reconnaissance, generating alerts with intelligence such as IP addresses, timestamps, and affected resources. By eliminating predictable identity patterns, the system defends against reconnaissance-based attacks, unauthorized access attempts, and other credential-driven threats, thereby improving organizational security across cloud platforms.

Technology related to resolution of hostname for webtop resource access is disclosed. In one example, a method includes receiving request for accessing one or more resources from the webtop associated with the user. A usage pattern data of the user for the webtop is determined. For the requested resource, hostname pre-resolution data is determined based on the usage pattern data and an access policy before a given resource is requested for access. A response for the resource access request is generated based on the determined hostname pre-resolution data and the access policy. The response for the resource access request comprises an address of at least one corresponding backend server for redirecting the user to access the requested resource.

The invention discloses a model training environment deployment method and system based on a TIPU card, and the method comprises the steps: guaranteeing that the TIPU card is correctly installed on a computing power server, and enabling management ports and storage ports of a storage server, the computing power server and the TIPU card to be connected with a switch; when the computing power server is powered on to start the system, a trusted root program of the TIPU card is started, a system environment is initialized, configuration including an IP address, a host name and a shared storage link is completed, and it is confirmed that management networks and storage networks of all devices are normally connected; loading security firmware on the TIPU card, wherein the security firmware comprises an operating system kernel and a driving program; on the basis of the security firmware, software and tools required by model training are deployed. According to the method, the data security in the model training process can be ensured, and data leakage and malicious tampering of the model are prevented.

This disclosure describes example techniques for automatically configuring domain name system (DNS) servers to handle custom hostnames assigned to hosted zones. The techniques monitor DNS record sets of the hosted zones for special DNS records registering new hostnames. When such a special DNS record is detected, the central DNS server checks a database to see if that hostname is already assigned to another hosted zone. If the hostname is not assigned to another hosted zone, the central DNS server automatically updates its own DNS configuration data pair the new hostname with the Internet Protocol (IP) address of the hosted zone requesting the hostname. This allows the central DNS server to resolve future DNS queries for the new hostname by routing requests to the proper zone.

Disclosed are various embodiments for providing split-tunneled network connectivity on a per-application basis. A DNS query is received from a locally hosted DNS resolver. A first recursive DNS query is sent to an external DNS server and a second recursive DNS query is sent to an internal DNS server. A first recursive DNS response is then received from the external DNS server and a second recursive DNS response is received from the external DNS server. A response is then provided to the DNS query.

Described herein are computing device(s) configured to identify first hostnames, parameters, or values for each call leg included in a call flow trace associated with a subscriber-specific identifier. The computing device(s) may also be configured to identify second hostnames, parameters, or values from network function (NF) service discovery procedures based on the first hostnames, parameters, or values and determine a best match NF service discovery procedure for the call flow trace based on correlation(s) between the first hostnames, parameters, or values and the second hostnames, parameters, or values.

An apparatus to facilitate transparent transportation in cloud-to-PC extension framework is disclosed. The apparatus includes one or more processors to generate, using a cloud-to-PC extension framework (CPEF) edge component, a root key of the CPEF edge component, wherein the CPEF edge component is trusted; deploy, using the CPEF edge component, a microservice container to locally host functionality of a microservice of an application, wherein the application is hosted remotely from the apparatus; initialize a sidecar for the microservice container; generate, by the sidecar, a client signed key using at least one of the root key and a hostname of the microservice; provide, by the sidecar, the client signed key to the microservice container; and redirect requests for the microservice to the microservice container, the requests originating from an accessing application of the apparatus, the requests redirected through a secure communication channel that is trusted based on the client signed key.

The invention relates to the technical field of computer storage, in particular to a system writing method for a USB flash disk by a USB flash disk burning tool, which comprises the following steps of: selecting a Ubuntu system as a substrate system for operating and maintaining a USB flash disk system, and selecting a boot file for installing a mirror image file as a boot loader; installing a required software toolkit and a server hardware test tool in the base system, setting the base system to automatically log in a root user, and modifying a hostname of the base system into an SN of a machine; maintenance of the USB flash disk system is realized through operations such as partition formatting of a storage medium, reduction of a root file system, modification of a partition table and installation of a boot loader; making the configured substrate system into a real-time operating system; integrating the generated real-time operating system file, the kernel and the virtual disk environment file; the content of the grub.cfg document is adjusted; and making the integrated file into a starting mirror image in an ISO file format. The technical defects of the two mainstream schemes are overcome.

This disclosure describes example techniques for automatically configuring domain name system (DNS) servers to handle custom hostnames assigned to hosted zones. The techniques monitor DNS record sets of the hosted zones for special DNS records registering new hostnames. When such a special DNS record is detected, the central DNS server checks a database to see if that hostname is already assigned to another hosted zone. If the hostname is not assigned to another hosted zone, the central DNS server automatically updates its own DNS configuration data pair the new hostname with the Internet Protocol (IP) address of the hosted zone requesting the hostname. This allows the central DNS server to resolve future DNS queries for the new hostname by routing requests to the proper zone.

The invention discloses a server name indication SNI identification method and device based on an FPGA, and the method comprises the steps: receiving an Ethernet data packet, obtaining a 72-byte data stream for a current clock period, moving one byte from the first byte of the data stream for one time according to a sliding window with the length of 9 bytes, carrying out the interception, obtaining 64 groups of sub-data streams, and carrying out the recognition of the SNI for each group of sub-data streams, matching the sub-data stream with a preset 9-byte server name indication SNI feature code, and if the matching is successful, obtaining the successfully matched sub-data stream; determining the length of a host name according to the values of the last two bytes in the successfully matched sub-data streams, determining the byte position of a host name field in the Ethernet data packet, and extracting a host name character string from the Ethernet data packet; and if the value of the extracted host name character string meets a preset character string threshold value, outputting a corresponding host name. According to the method and the device, the host name in the Ethernet data packet can be effectively identified at a line speed.

The invention discloses a method for realizing table-level blood relationship information construction based on a task running log, which comprises the following steps of: S1) collecting and acquiring task running log data in a system, and analyzing the log to acquire a database operation statement; s2) analyzing the obtained log file, and extracting a database operation statement in the log file; s3) screening the database operation statements obtained by analysis in combination with a job operation record so as to determine target operation statements related to data blood relationship construction; s4) establishing a mapping relation between a network protocol address and a host name, and further analyzing a mapping relation from the source table to the target table; s5, the screened target operation statements are used for constructing the blood relationship between the data tables. By deeply analyzing the task running logs, key data operation can be automatically recognized, the blood relationship between the data tables is constructed, and therefore the efficiency and accuracy of data blood relationship analysis are remarkably improved.

The present application discloses a method, system, and computer system for detecting DNS tunneling traffic. The method includes (i) obtaining non-DNS network traffic across an enterprise network, (ii) obtaining a hostname comprised in the non-DNS network traffic, (iii) querying a security service for a Domain Name System (DNS) tunneling attack verdict based at least in part on the hostname, (iv) determining whether the non-DNS network traffic is malicious traffic based at least in part on the DNS tunneling attack verdict, and (v) handling the non-DNS network traffic based at least in part on a determination of whether the non-DNS network traffic is malicious traffic based at least in part on the DNS tunneling attack verdict.

Systems for performing methods which include receiving by a VPN server, from a VPN client operating on a computing device, over a VPN connection a first message including a first IP address. The VPN server determines a hostname based on the first IP address, resolves the hostname to a second IP address, and transmits the first message to a network device at the second IP address.

A system is disclosed comprising a memory containing instructions and one or more computer processors. When the instructions are executed, the system performs an operation to configure a Domain Name System (DNS) proxy, executing in a node of a cloud data platform associated with a first account, to perform hostname resolution of an Account Host Identifier (AHID) of the first account. The DNS proxy receives a DNS request from a process executing in a pod of the node, and the system fails to resolve the DNS request if the name in the DNS request differs from the AHID of the first account. The system returns an Internet Protocol (IP) address if the name in the DNS request matches the AHID. The process executing in the pod of the node is configured to send data to data storage of the cloud data platform using the returned IP address.

A packet-filtering system described herein may be configured to filter packets with encrypted hostnames in accordance with one or packet-filtering rules. The packet-filtering system may resolve a plaintext hostname from ciphertext comprising an encrypted Server Name Indication (eSNI) value. The packet-filtering system may resolve the plaintext hostname using a plurality of techniques. Once the plaintext hostname is resolved, the packet-filtering system may then use the plaintext hostname to determine whether the packets are associated with one or more threat indicators. If the packet-filtering system determines that the packets are associated with one or more threat indicators, the packet-filtering system may apply a packet filtering operation associated with the packet-filtering rules to the packets.

This disclosure relates to enhanced overlay network-based transport of traffic to and from customer branch office locations, facilitated through the use of the Internet-based overlay routing. A method of selecting an ingress edge region of the overlay network begins by mapping a service hostname to an IKEv2 destination of an outer IPsec tunnel associated with a first overlay network edge. An IKEv2 session is established from the first overlay network edge to the customer router. Upon tunnel establishment, a secondary lookup is performed to determine whether the first overlay network edge is an appropriate ingress region. Based on a response to the secondary lookup, a IKEv2 redirect is issued to a second overlay network edge. A new tunnel is then established from the second overlay network edge to the customer router. Thereafter, an additional lookup may also be performed to determine whether the second overlay network edge remains an appropriate ingress region.

Deleting web browser data by maintaining a set of Uniform Resource Locators (URL) hostnames, where a URL hostname is added to the set of hostnames responsive to the URL being accessed by a web browser and responsive to determining that predefined grouping conditions that define a logical group is met by the URL, and deleting one or more types of data maintained by the web browser in association with URLs associated with the hostnames in the set of hostnames, where the deleting is performed in accordance with a predefined deletion policy that specifies the types of data that are to be deleted and predefined deletion conditions, and where the deleting is performed responsive to determining that the predefined deletion conditions are met and determining that the web browser is not currently accessing any URL associated with the hostnames in the set of hostnames.

Ensure that devices connected to the LAN can be reliably accessed using their hostnames. [Solution] The hostnames and MAC addresses of devices connected to LAN2 are associated and registered in the device information file 104. When a request for confirmation of duplicate IP addresses (GARP, DAD-NS) is received, the address information collection unit 112 functions and updates the address information file 105 by associating the IP addresses and MAC addresses contained therein. When a destination resolution request (mDNS) including a hostname is received, the name resolution unit 113 functions, identifies the MAC address by referring to the device information file 104 from the hostname, and identifies the IP address by referring to the address information file 105 from the identified MAC address. The resolution result provision unit 114 notifies the sender of the destination resolution request (mDNS) of this identified IP address.

The invention relates to the technical field of coal mine operation and maintenance, and discloses a multi-system remote collaborative management system and method for a fully mechanized coal mining face of a coal mine, and the method comprises a management process of a coal mining system host located at a coal mine side: uniformly managing the host name, host IP and online and offline states of each system through a remote assistance host; a coal mine system maintenance process at an energy group side: maintaining basic information of a fully mechanized coal mining face of each coal mine through a remote operation and maintenance center; and an expert remote operation and maintenance process located at the Internet side: a remote operation and maintenance center is deployed, and a remote expert seat is provided for remote system troubleshooting and daily system operation and maintenance after the coal mining system breaks down. Through a coal mine-energy group-remote operation and maintenance center three-level remote assistance mode, complex faults and problems in actual fully mechanized coal mining face system operation can be better solved, meanwhile, production data isolation can be effectively achieved, data safety is guaranteed, and compared with hardware resource management, cost can be greatly saved.

An authoritative domain name system (DNS) server receives a DNS query for an address record for a hostname. The DNS server selects an IP address from multiple IP addresses to include in an answer to the DNS query, where each IP address is capable of being selected to be included in the answer regardless of the hostname being queried, where multiple servers of a distributed cloud computing network are capable of receiving traffic at each IP address, and where none of the IP addresses identify a particular server of the distributed cloud computing network. The authoritative DNS server transmits an answer to the DNS query that includes the selected IP address. Sometime after, one of the servers of the distributed cloud computing network receives a request for content that is addressed to the selected IP address and processes the request.

An apparatus in a computer network system extracts network traffic metadata related to a client computing device of a local network. The network traffic metadata is required by a device fingerprinting process. In response to detecting a multicast DNS (mDNS) packet query in the network traffic metadata, the apparatus collects an mDNS hostname related to the client computing device from the mDNS packet query. In response to determining, at a first point in time, that a dynamic host configuration protocol (DHCP) hostname related to the client computing device is unavailable in the network traffic metadata, the apparatus assigns the mDNS hostname to the client computing device.

Specific connection request is refused responsive to a match on the MAC ban list. If not on the MAC ban list, and a station has MAC randomization enabled, the specific connection requests is also checked against the hostname ban list, wherein the specific connection request is refused responsive to a match on the hostname ban list. The specific new connection request is allowed to proceed responsive to not matching the MAC ban list and not matching the hostname ban list.

Embodiments of the present disclosure relate to service discovery across tunnel endpoints in overlay networks. In an example, a network device can receive, from a client device, a multicast query for a service advertised by a host device connected to another network device. The network device is configured as a first virtual tunnel endpoint (VTEP) in an overlay network, while the other network device is configured as a second VTEP. The network device can determine whether a hostname of the host device corresponding to a servicename in the multicast query exists in a resource record. In response to determining that the hostname exists in the resource record, the network device can identify an overlay network path corresponding to the hostname from the resource record. The network device can encapsulate the multicast query based on an overlay encapsulation protocol implemented at the first VTEP, and route the encapsulated multicast query to the host device via the overlay network path.

The invention provides an Internet of Things equipment recommendation method and device, electronic equipment, a storage medium and a program product, and relates to the technical field of Internet of Things. Wherein the index data set is determined through the IoT device data and the behavior data of the user, and the feature data is extracted according to the index data set, so that hidden information behind user behaviors can be further mined. Through the IoT device recommendation model, the most matched IoT device is automatically obtained, interference of human factors is avoided, and the accuracy of recommending the IoT device is improved. According to the method, the most matched IoT device is determined according to the effective HOSTNAME, the recombined URL and the initial weight, the practical flexibility of the IoT device is improved, and the application range of the IoT device is widened.

The invention discloses a construction method and device of a distributed training environment and a storage medium, and relates to the technical field of cloud computing, and the method comprises the steps that after a user selects a cluster identifier, a resource partition, a node number and a mirror image parameter, a deployment description containing a computing chip, a memory and a high-speed network is dynamically combined and generated from a resource configuration template library; according to the described computing resource requirements, comparing the real-time states of the nodes to determine an adaptive target node; matching calculation and communication resources of the configured target node to obtain the configured target node; and scheduling a container group defined by deployment description to the node, executing an entry script to complete safe mutual trust among containers, sequential host name allocation, environment variable injection and a synchronous barrier, ensuring consistent startup of multiple copies, and completing multi-machine training environment deployment. The problem that the multi-machine training environment construction efficiency is remarkably low is solved, the manual configuration cost of the network and resources is reduced, and the stability and isolation under multi-user concurrency are guaranteed.

Provided are a method for acquiring location information and an apparatus for acquiring location information, a device and a storage medium. The method includes: receiving answer data sent by a home subscriber server (HSS), where the answer data carries a hostname of a mobility management entity (MME); determining, on the basis of the hostname of the MME, a network actually registered for a user; and in a case where the network actually registered for the user is a 5G network, acquiring location information of the user in the 5G network.

The present application discloses a method, system, and computer system for detecting DNS tunneling traffic. The method includes (i) obtaining non-DNS network traffic across an enterprise network, (ii) obtaining a hostname comprised in the non-DNS network traffic, (iii) querying a security service for a Domain Name System (DNS) tunneling attack verdict based at least in part on the hostname, (iv) determining whether the non-DNS network traffic is malicious traffic based at least in part on the DNS tunneling attack verdict, and (v) handling the non-DNS network traffic based at least in part on a determination of whether the non-DNS network traffic is malicious traffic based at least in part on the DNS tunneling attack verdict.

Techniques for using computer networking protocol extensions to route control-plane traffic and data-plane traffic associated with a common application are described herein. For instance, a traffic flow associated with an application may be established such that control-plane traffic is sent to a control-plane node associated with the application and data-plane traffic is sent to a data-plane node associated with the application. When a client device sends an authentication request to connect to the application, the control-plane node may send an indication of a hostname to be used by the client device to send data-plane traffic to the data-node. As such, when a packet including the hostname corresponding with the data-plane node is received, the packet may be forwarded to the data-plane node.