METHODS AND SYSTEMS FOR DETECTING COMPROMISED NETWORKS AND/OR COMPUTERS

Patent №

US 9,306,969

Granted

2016-04-05

Filed 2013

Owner

GEORGIA TECH RESEARCH COROPRATION

+1 more

Lab

—

AI components

ml · vision · kr · hardware

Assignment

Recorded

Dataset

AIPD

2023_r1 edition

Application

14015661

View graph

Collect Domain Name System (DNS) data, the DNS data generated by a DNS server and/or similar device, wherein the DNS data comprises DNS queries, wherein the collected DNS data comprises DNS query rate information. Examine the collected DNS data relative to DNS data from known compromised and/or uncompromised computers. Determine an existence of the collection of compromised networks and/or computers, and/or an identity of compromised networks and/or computers, based on the examination.

Machine learning Vision Knowledge representation AI hardwareH04L 63/1441G06F 16/951H04L 61/4511H04L 63/1425H04L 63/1491H04L 61/5076H04L 2463/144

Google Patents

AI classification

Knowledge representation1.00

AI hardware0.76

Vision0.74

Machine learning0.53

Planning0.09

Natural language0.03

Evolutionary computation0.01

Speech0.00

Ownership

GEORGIA TECH RESEARCH COROPRATION

assignment · 361850735

HELP/SYSTEMS, LLC

assignment · 499880381

Assignors

DAGON, DAVID, FEAMSTER, NICK, LEE, WENKE, EDMONDS, ROBERT, LIPTON, RICHARD, RAMACHANDRAN, ANIRUDH

On an employer assignment, the assignors are typically the inventors.

Cites (53)

METHOD AND SYSTEM FOR DETECTING MALICIOUS DOMAIN NAMES AT AN UPPER DNS HIERARCHYUS 8,631,489 · 2014 REPUTATION-BASED METHOD AND SYSTEM FOR DETERMINING A LIKELIHOOD THAT A MESSAGE IS UNDESIREDUS 8,527,592 · 2013 SYSTEM AND METHOD FOR DETECTION OF DOMAIN-FLUX BOTNETS AND THE LIKEUS 8,516,585 · 2013 SYSTEMS AND METHODS FOR PREPENDING NONCE LABELS TO DNS QUERIES TO ENHANCE SECURITYUS 8,484,377 · 2013 CLASS DISCOVERY FOR AUTOMATED DISCOVERY, ATTRIBUTION, ANALYSIS, AND RISK ASSESSMENT OF SECURITY THREATSUS 8,418,249 · 2013 MACHINE LEARNING BASED BOTNET DETECTION WITH DYNAMIC ADAPTATIONUS 8,402,543 · 2013 DETECTION OF DOWNLOADED MALWARE USING DNS INFORMATIONUS 8,347,394 · 2013 INFERRING FILE AND WEBSITE REPUTATIONS BY BELIEF PROPAGATION LEVERAGING MACHINE REPUTATIONUS 8,341,745 · 2012 DETECTING DNS FAST-FLUX ANOMALIESUS 8,260,914 · 2012 METHOD AND APPARATUS FOR IMPROVING SECURITY IN A DATA PROCESSING SYSTEMUS 8,200,761 · 2012 DYNAMIC STREAMING MESSAGE CLUSTERING FOR RAPID SPAM-WAVE DETECTIONUS 8,170,966 · 2012 BOTTOM-UP ANALYSIS OF NETWORK SITESUS 8,161,130 · 2012 METHODS, MEDIA AND SYSTEMS FOR DETECTING ANOMALOUS PROGRAM EXECUTIONSUS 8,074,115 · 2011 SYSTEM AND METHOD FOR INTERNET ENDPOINT PROFILINGUS 8,019,764 · 2011 METHOD AND APPARATUS FOR PROVIDING FRAUD DETECTION USING CONNECTION FREQUENCY THRESHOLDSUS 8,015,414 · 2011 METHOD AND SYSTEM FOR PROCESSING RECURRENT CONSUMER TRANSACTIONSUS 7,996,288 · 2011 SYSTEMS AND METHODS FOR DETECTION OF NEW MALICIOUS EXECUTABLESUS 7,979,907 · 2011 TREES OF CLASSIFIERS FOR DETECTING EMAIL SPAMUS 7,930,353 · 2011 SYSTEM AND METHODS FOR DETECTING INTRUSIONS IN A COMPUTER SYSTEM BY MONITORING OPERATING SYSTEM REGISTRY ACCESSESUS 7,913,306 · 2011 HIERARCHICAL STATISTICAL MODEL OF INTERNET REPUTATIONUS 7,890,627 · 2011 METHODS FOR COST-SENSITIVE MODELING FOR INTRUSION DETECTION AND RESPONSEUS 7,818,797 · 2010 AUTOMATED ENTERPRISE RISK ASSESSMENTUS 7,752,125 · 2010 DETECTING PROBES AND SCANS OVER HIGH-BANDWIDTH, LONG-TERM, INCOMPLETE NETWORK TRAFFIC INFORMATION USING LIMITED MEMORYUS 7,752,665 · 2010 METHOD AND APPARATUS FOR WORM DETECTION AND CONTAINMENT IN THE INTERNET COREUS 7,712,134 · 2010 SERVER-BASED UNIVERSAL RESOURCE LOCATOR VERIFICATION SERVICEUS 7,698,442 · 2010

and 28 more

Cited by (16)

DETECTING AND PREVENTING EXPLOITS OF SOFTWARE VULNERABILITY USING INSTRUCTION TAGSUS 11,741,196 · 2023 IDENTIFYING AND CIRCUMVENTING SECURITY SCANNERSUS 11,374,959 · 2022 ABNORMAL BEHAVIOR DETECTION OF ENTERPRISE ENTITIES USING TIME-SERIES DATAUS 11,310,247 · 2022 SYSTEM AND METHOD FOR CONTENT MONITORING AND FILTERING TO IMPROVE NETWORK EFFICIENCYUS 10,887,661 · 2021 METHODS AND SYSTEMS FOR NETWORK FLOW ANALYSIS

Related research

Anomaly Detection by Monitoring Unintended DNS Traffic on Wireless NetworkSemantic Scholar Special Characters in Domain's Name as Possible Indication of Compromitation StatusOpenAlex The Research on Intelligent DNS SecuritySemantic Scholar Lightweight Hybrid Detection of Data Exfiltration using DNS based on Machine LearningSemantic Scholar Detection Of Malicious DNS and Web Servers using Graph-Based ApproachesSemantic Scholar

Full text

Google Patents