55 results about "Hostname" patented technology

A centralized network traffic monitoring and intrusion detection system (1) comprising a system log aggregation module (110) including a means for receiving (111), a means for decoding (112) the user's syslog, a means for comparing (113) the data from the means for decoding, and a means for indexing (114) the tagged data and storing the indexed data. The system (1) also comprises an analysis and alert module (120) including a means for fetching (121) the indexed data, a means for checking and correlating (122) the retrieved indexed data, a means for analysing (123) the checked and correlated data, a means for compiling (124) the analysed and prioritized data and generating a report, and a means for alerting (124). The system (1) further includes a Bad IP Feed module (130) including a means for generating (131) updated lists of bad IP addresses and hostnames and automatically updating a user's network devices.

The present invention relates to a cybersecurity system for preventing adversarial reconnaissance in cloud, hybrid, and multi-cloud environments by dynamically modifying user authentication identifiers, hostnames and fully qualified domain names. The system updates login usernames in real time using randomized, non-repeating values generated from a configurable dictionary. Updates occur at scheduled, random, coordinated, or event-triggered intervals to disrupt profiling and targeting attempts. When identifiers are changed, associated sessions and tokens are invalidated to prevent reuse. The system monitors expired credential usage to detect potential reconnaissance, generating alerts with intelligence such as IP addresses, timestamps, and affected resources. By eliminating predictable identity patterns, the system defends against reconnaissance-based attacks, unauthorized access attempts, and other credential-driven threats, thereby improving organizational security across cloud platforms.

The invention discloses a model training environment deployment method and system based on a TIPU card, and the method comprises the steps: guaranteeing that the TIPU card is correctly installed on a computing power server, and enabling management ports and storage ports of a storage server, the computing power server and the TIPU card to be connected with a switch; when the computing power server is powered on to start the system, a trusted root program of the TIPU card is started, a system environment is initialized, configuration including an IP address, a host name and a shared storage link is completed, and it is confirmed that management networks and storage networks of all devices are normally connected; loading security firmware on the TIPU card, wherein the security firmware comprises an operating system kernel and a driving program; on the basis of the security firmware, software and tools required by model training are deployed. According to the method, the data security in the model training process can be ensured, and data leakage and malicious tampering of the model are prevented.

This disclosure describes example techniques for automatically configuring domain name system (DNS) servers to handle custom hostnames assigned to hosted zones. The techniques monitor DNS record sets of the hosted zones for special DNS records registering new hostnames. When such a special DNS record is detected, the central DNS server checks a database to see if that hostname is already assigned to another hosted zone. If the hostname is not assigned to another hosted zone, the central DNS server automatically updates its own DNS configuration data pair the new hostname with the Internet Protocol (IP) address of the hosted zone requesting the hostname. This allows the central DNS server to resolve future DNS queries for the new hostname by routing requests to the proper zone.

Disclosed are various embodiments for providing split-tunneled network connectivity on a per-application basis. A DNS query is received from a locally hosted DNS resolver. A first recursive DNS query is sent to an external DNS server and a second recursive DNS query is sent to an internal DNS server. A first recursive DNS response is then received from the external DNS server and a second recursive DNS response is received from the external DNS server. A response is then provided to the DNS query.

Described herein are computing device(s) configured to identify first hostnames, parameters, or values for each call leg included in a call flow trace associated with a subscriber-specific identifier. The computing device(s) may also be configured to identify second hostnames, parameters, or values from network function (NF) service discovery procedures based on the first hostnames, parameters, or values and determine a best match NF service discovery procedure for the call flow trace based on correlation(s) between the first hostnames, parameters, or values and the second hostnames, parameters, or values.

An apparatus to facilitate transparent transportation in cloud-to-PC extension framework is disclosed. The apparatus includes one or more processors to generate, using a cloud-to-PC extension framework (CPEF) edge component, a root key of the CPEF edge component, wherein the CPEF edge component is trusted; deploy, using the CPEF edge component, a microservice container to locally host functionality of a microservice of an application, wherein the application is hosted remotely from the apparatus; initialize a sidecar for the microservice container; generate, by the sidecar, a client signed key using at least one of the root key and a hostname of the microservice; provide, by the sidecar, the client signed key to the microservice container; and redirect requests for the microservice to the microservice container, the requests originating from an accessing application of the apparatus, the requests redirected through a secure communication channel that is trusted based on the client signed key.

This disclosure describes example techniques for automatically configuring domain name system (DNS) servers to handle custom hostnames assigned to hosted zones. The techniques monitor DNS record sets of the hosted zones for special DNS records registering new hostnames. When such a special DNS record is detected, the central DNS server checks a database to see if that hostname is already assigned to another hosted zone. If the hostname is not assigned to another hosted zone, the central DNS server automatically updates its own DNS configuration data pair the new hostname with the Internet Protocol (IP) address of the hosted zone requesting the hostname. This allows the central DNS server to resolve future DNS queries for the new hostname by routing requests to the proper zone.

The invention discloses a server name indication SNI identification method and device based on an FPGA, and the method comprises the steps: receiving an Ethernet data packet, obtaining a 72-byte data stream for a current clock period, moving one byte from the first byte of the data stream for one time according to a sliding window with the length of 9 bytes, carrying out the interception, obtaining 64 groups of sub-data streams, and carrying out the recognition of the SNI for each group of sub-data streams, matching the sub-data stream with a preset 9-byte server name indication SNI feature code, and if the matching is successful, obtaining the successfully matched sub-data stream; determining the length of a host name according to the values of the last two bytes in the successfully matched sub-data streams, determining the byte position of a host name field in the Ethernet data packet, and extracting a host name character string from the Ethernet data packet; and if the value of the extracted host name character string meets a preset character string threshold value, outputting a corresponding host name. According to the method and the device, the host name in the Ethernet data packet can be effectively identified at a line speed.

The invention discloses a method for realizing table-level blood relationship information construction based on a task running log, which comprises the following steps of: S1) collecting and acquiring task running log data in a system, and analyzing the log to acquire a database operation statement; s2) analyzing the obtained log file, and extracting a database operation statement in the log file; s3) screening the database operation statements obtained by analysis in combination with a job operation record so as to determine target operation statements related to data blood relationship construction; s4) establishing a mapping relation between a network protocol address and a host name, and further analyzing a mapping relation from the source table to the target table; s5, the screened target operation statements are used for constructing the blood relationship between the data tables. By deeply analyzing the task running logs, key data operation can be automatically recognized, the blood relationship between the data tables is constructed, and therefore the efficiency and accuracy of data blood relationship analysis are remarkably improved.

The present application discloses a method, system, and computer system for detecting DNS tunneling traffic. The method includes (i) obtaining non-DNS network traffic across an enterprise network, (ii) obtaining a hostname comprised in the non-DNS network traffic, (iii) querying a security service for a Domain Name System (DNS) tunneling attack verdict based at least in part on the hostname, (iv) determining whether the non-DNS network traffic is malicious traffic based at least in part on the DNS tunneling attack verdict, and (v) handling the non-DNS network traffic based at least in part on a determination of whether the non-DNS network traffic is malicious traffic based at least in part on the DNS tunneling attack verdict.

Systems for performing methods which include receiving by a VPN server, from a VPN client operating on a computing device, over a VPN connection a first message including a first IP address. The VPN server determines a hostname based on the first IP address, resolves the hostname to a second IP address, and transmits the first message to a network device at the second IP address.

A system is disclosed comprising a memory containing instructions and one or more computer processors. When the instructions are executed, the system performs an operation to configure a Domain Name System (DNS) proxy, executing in a node of a cloud data platform associated with a first account, to perform hostname resolution of an Account Host Identifier (AHID) of the first account. The DNS proxy receives a DNS request from a process executing in a pod of the node, and the system fails to resolve the DNS request if the name in the DNS request differs from the AHID of the first account. The system returns an Internet Protocol (IP) address if the name in the DNS request matches the AHID. The process executing in the pod of the node is configured to send data to data storage of the cloud data platform using the returned IP address.

A packet-filtering system described herein may be configured to filter packets with encrypted hostnames in accordance with one or packet-filtering rules. The packet-filtering system may resolve a plaintext hostname from ciphertext comprising an encrypted Server Name Indication (eSNI) value. The packet-filtering system may resolve the plaintext hostname using a plurality of techniques. Once the plaintext hostname is resolved, the packet-filtering system may then use the plaintext hostname to determine whether the packets are associated with one or more threat indicators. If the packet-filtering system determines that the packets are associated with one or more threat indicators, the packet-filtering system may apply a packet filtering operation associated with the packet-filtering rules to the packets.

This disclosure relates to enhanced overlay network-based transport of traffic to and from customer branch office locations, facilitated through the use of the Internet-based overlay routing. A method of selecting an ingress edge region of the overlay network begins by mapping a service hostname to an IKEv2 destination of an outer IPsec tunnel associated with a first overlay network edge. An IKEv2 session is established from the first overlay network edge to the customer router. Upon tunnel establishment, a secondary lookup is performed to determine whether the first overlay network edge is an appropriate ingress region. Based on a response to the secondary lookup, a IKEv2 redirect is issued to a second overlay network edge. A new tunnel is then established from the second overlay network edge to the customer router. Thereafter, an additional lookup may also be performed to determine whether the second overlay network edge remains an appropriate ingress region.

Ensure that devices connected to the LAN can be reliably accessed using their hostnames. [Solution] The hostnames and MAC addresses of devices connected to LAN2 are associated and registered in the device information file 104. When a request for confirmation of duplicate IP addresses (GARP, DAD-NS) is received, the address information collection unit 112 functions and updates the address information file 105 by associating the IP addresses and MAC addresses contained therein. When a destination resolution request (mDNS) including a hostname is received, the name resolution unit 113 functions, identifies the MAC address by referring to the device information file 104 from the hostname, and identifies the IP address by referring to the address information file 105 from the identified MAC address. The resolution result provision unit 114 notifies the sender of the destination resolution request (mDNS) of this identified IP address.

The invention relates to the technical field of coal mine operation and maintenance, and discloses a multi-system remote collaborative management system and method for a fully mechanized coal mining face of a coal mine, and the method comprises a management process of a coal mining system host located at a coal mine side: uniformly managing the host name, host IP and online and offline states of each system through a remote assistance host; a coal mine system maintenance process at an energy group side: maintaining basic information of a fully mechanized coal mining face of each coal mine through a remote operation and maintenance center; and an expert remote operation and maintenance process located at the Internet side: a remote operation and maintenance center is deployed, and a remote expert seat is provided for remote system troubleshooting and daily system operation and maintenance after the coal mining system breaks down. Through a coal mine-energy group-remote operation and maintenance center three-level remote assistance mode, complex faults and problems in actual fully mechanized coal mining face system operation can be better solved, meanwhile, production data isolation can be effectively achieved, data safety is guaranteed, and compared with hardware resource management, cost can be greatly saved.

An authoritative domain name system (DNS) server receives a DNS query for an address record for a hostname. The DNS server selects an IP address from multiple IP addresses to include in an answer to the DNS query, where each IP address is capable of being selected to be included in the answer regardless of the hostname being queried, where multiple servers of a distributed cloud computing network are capable of receiving traffic at each IP address, and where none of the IP addresses identify a particular server of the distributed cloud computing network. The authoritative DNS server transmits an answer to the DNS query that includes the selected IP address. Sometime after, one of the servers of the distributed cloud computing network receives a request for content that is addressed to the selected IP address and processes the request.

An apparatus in a computer network system extracts network traffic metadata related to a client computing device of a local network. The network traffic metadata is required by a device fingerprinting process. In response to detecting a multicast DNS (mDNS) packet query in the network traffic metadata, the apparatus collects an mDNS hostname related to the client computing device from the mDNS packet query. In response to determining, at a first point in time, that a dynamic host configuration protocol (DHCP) hostname related to the client computing device is unavailable in the network traffic metadata, the apparatus assigns the mDNS hostname to the client computing device.

Specific connection request is refused responsive to a match on the MAC ban list. If not on the MAC ban list, and a station has MAC randomization enabled, the specific connection requests is also checked against the hostname ban list, wherein the specific connection request is refused responsive to a match on the hostname ban list. The specific new connection request is allowed to proceed responsive to not matching the MAC ban list and not matching the hostname ban list.

Embodiments of the present disclosure relate to service discovery across tunnel endpoints in overlay networks. In an example, a network device can receive, from a client device, a multicast query for a service advertised by a host device connected to another network device. The network device is configured as a first virtual tunnel endpoint (VTEP) in an overlay network, while the other network device is configured as a second VTEP. The network device can determine whether a hostname of the host device corresponding to a servicename in the multicast query exists in a resource record. In response to determining that the hostname exists in the resource record, the network device can identify an overlay network path corresponding to the hostname from the resource record. The network device can encapsulate the multicast query based on an overlay encapsulation protocol implemented at the first VTEP, and route the encapsulated multicast query to the host device via the overlay network path.

The invention provides an Internet of Things equipment recommendation method and device, electronic equipment, a storage medium and a program product, and relates to the technical field of Internet of Things. Wherein the index data set is determined through the IoT device data and the behavior data of the user, and the feature data is extracted according to the index data set, so that hidden information behind user behaviors can be further mined. Through the IoT device recommendation model, the most matched IoT device is automatically obtained, interference of human factors is avoided, and the accuracy of recommending the IoT device is improved. According to the method, the most matched IoT device is determined according to the effective HOSTNAME, the recombined URL and the initial weight, the practical flexibility of the IoT device is improved, and the application range of the IoT device is widened.

The invention discloses a construction method and device of a distributed training environment and a storage medium, and relates to the technical field of cloud computing, and the method comprises the steps that after a user selects a cluster identifier, a resource partition, a node number and a mirror image parameter, a deployment description containing a computing chip, a memory and a high-speed network is dynamically combined and generated from a resource configuration template library; according to the described computing resource requirements, comparing the real-time states of the nodes to determine an adaptive target node; matching calculation and communication resources of the configured target node to obtain the configured target node; and scheduling a container group defined by deployment description to the node, executing an entry script to complete safe mutual trust among containers, sequential host name allocation, environment variable injection and a synchronous barrier, ensuring consistent startup of multiple copies, and completing multi-machine training environment deployment. The problem that the multi-machine training environment construction efficiency is remarkably low is solved, the manual configuration cost of the network and resources is reduced, and the stability and isolation under multi-user concurrency are guaranteed.

The present application discloses a method, system, and computer system for detecting DNS tunneling traffic. The method includes (i) obtaining non-DNS network traffic across an enterprise network, (ii) obtaining a hostname comprised in the non-DNS network traffic, (iii) querying a security service for a Domain Name System (DNS) tunneling attack verdict based at least in part on the hostname, (iv) determining whether the non-DNS network traffic is malicious traffic based at least in part on the DNS tunneling attack verdict, and (v) handling the non-DNS network traffic based at least in part on a determination of whether the non-DNS network traffic is malicious traffic based at least in part on the DNS tunneling attack verdict.

Techniques for using computer networking protocol extensions to route control-plane traffic and data-plane traffic associated with a common application are described herein. For instance, a traffic flow associated with an application may be established such that control-plane traffic is sent to a control-plane node associated with the application and data-plane traffic is sent to a data-plane node associated with the application. When a client device sends an authentication request to connect to the application, the control-plane node may send an indication of a hostname to be used by the client device to send data-plane traffic to the data-node. As such, when a packet including the hostname corresponding with the data-plane node is received, the packet may be forwarded to the data-plane node.

A networked computer system enables a transaction to be executed securely. An initiator sends a service request to a control server. The control server creates a transaction server for the sole purpose of execution of the transaction requested by the service request. Creating the transaction server includes: selecting an IP address randomly from a pool of IP addresses and assigning the selected IP address to the transaction server; creating a DNS entry including a randomly-constructed hostname; and associating the DNS entry with the selected IP address. If the transaction server pre-exists, it is made accessible in response to receiving the service request. The control server informs the initiator of the created transaction server. The initiator engages in the transaction with the transaction server, independently of the control server. The transaction server terminates upon completion of the transaction or the expiration of a timeout period.

The application discloses a data processing method and device, a storage medium and an electronic device, and relates to the technical field of computers. The method comprises the following steps: firstly, in response to the fact that a UDM server receives transparent data update information sent by an AS, acquiring number information corresponding to the transparent data update information; determining a target HSS corresponding to the transparent data update information, a host name and location information of the target HSS based on a number segment corresponding to the number information; according to the location information, if it is judged that the distance between the UDM server and the target HSS is less than or equal to a preset distance threshold, triggering a preset update transparent data switch to open a direct channel between the UDM server and the target HSS; and sending the transparent data update information to the target HSS through the direct channel according to the host name. Compared with the prior art, the application can enable the target HSS to receive the transparent data update information of the UDM server in real time, ensure that a supplementary service takes effect, and improve user experience.

The invention discloses a link tracking sampling rate adjusting method and device, relates to the technical field of cloud computing and can also be used in the financial field, and the method comprises the following steps: obtaining tracking index data including a tracking sampling rate and index data of a JAVA virtual machine; extracting host name and service name information based on the index data of the JAVA virtual machine; and adjusting the tracking sampling rate corresponding to the corresponding service of the corresponding host based on the index data of the JAVA virtual machine, the tracking sampling rate, the host name and the service name information. Therefore, automatic real-time adjustment of the link tracking sampling rate of the specific service on the specific host is realized, manual intervention is not needed, the labor cost is reduced, and the problem of data redundancy caused by improper setting of the sampling rate is avoided.

A computing device receives an IP address extracted from an encrypted client hello (ECH) enabled transport layer security (TLS) connection request from a client computing device and identifies, from a list of a plurality of hostnames, a set of hostnames matching the IP address. The device generates a reduced list of the set hostnames matching the IP address and generates a reduced list of the set of hostnames matching the IP address by removing hostnames that do not support an ECH extension of a TLS standard from the set of hostnames matching the IP address. Finally, the device retrieves reputation information related to one or more hostnames of the reduced list for protecting the client computing device and / or a computer network based on the reputation information.

This application discloses a Server Name Indicator (SNI) identification method and apparatus based on FPGA. It receives Ethernet data packets and, for the current clock cycle, acquires a 72-byte data stream. Using a 9-byte sliding window, it truncates the data stream one byte at a time, resulting in 64 sub-data streams. For each sub-data stream, it matches it against a preset 9-byte Server Name Indicator (SNI) feature code. If a match is successful, the matched sub-data stream is acquired. The length of the hostname is determined based on the last two bytes of the matched sub-data stream, and the byte position of the hostname field in the Ethernet data packet is determined. The hostname string is extracted from the Ethernet data packet. If the extracted hostname string value meets a preset string threshold, the corresponding hostname is output. This application can efficiently identify the hostname in Ethernet data packets at line speed.