专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11025482B2 Resilient domain name service (DNS) resolution when an authoritative name server is degraded 有权
公开(公告)号：US11025482B2
公开(公告)日：2021-06-01
申请号：US15881596
申请日：2018-01-26
申请人： Verisign, Inc.
发明人： Shumon Huque , Burton S. Kaliski, Jr. , Eric Osterweil , Frank Scalzo , Duane Wessels , Glen Wiley
IPC分类号： H04L12/24 , H04L29/12 , H04W24/04 , H04L29/14
摘要： In one embodiment, a resolution resiliency application modifies domain name service (DNS) resolution. In operation, the resolution resiliency application determines that an authoritative name server has begun recovering from a degraded state or receives a flush list update from the authoritative name server. In response, the resolution resiliency application performs operation(s) that modify a query rate and/or a cache. The query rate specifies a frequency associated with DNS queries transmitted to the first authoritative name server. The cache stores DNS record(s) received from the first authoritative name server. Finally, the resolution resiliency application generates a DNS response to a DNS query based on the modified query rate and/or the modified cache.

2. 发明授权

US11032127B2 Resilient domain name service (DNS) resolution when an authoritative name server is unavailable 有权
公开(公告)号：US11032127B2
公开(公告)日：2021-06-08
申请号：US15633655
申请日：2017-06-26
申请人： VERISIGN, INC.
发明人： Shumon Huque , Burton S. Kaliski, Jr. , Eric Osterweil , Frank Scalzo , Glen Wiley
IPC分类号： H04L12/24 , H04L29/12 , H04W24/04 , H04L29/14
摘要： In one embodiment, a resolution resiliency application performs robust domain name system (DNS) resolution. In operation, the resolution resiliency application determines that an authoritative name server that is responsible for a domain name specified in a DNS query is unavailable. In response to determining that the authoritative name server is unavailable, the resolution resiliency application performs operation(s) that modify one or more DNS records stored in a cache based on one or more resiliency policies associated with the authoritative name server. The resolution resiliency application then generates a DNS response to the DNS query based on a DNS record stored in the modified cache. Notably, unlike conventional techniques that may generate inaccurate DNS responses based on stale DNS records, the disclosed techniques increase the likelihood of providing clients with DNS responses that accurately provide requested information.

3. 发明申请

US20160254955A1 QUERY LATENCY OF A DNS SERVICE 审中-公开
标题翻译： QUERY LATENCY的DNS服务
公开(公告)号：US20160254955A1
公开(公告)日：2016-09-01
申请号：US15054894
申请日：2016-02-26
申请人： VERISIGN, INC.
发明人： Yannis Labrou , Frank Scalzo , Ramakant Pandrangi
IPC分类号： H04L12/24 , H04L29/12 , H04L12/26
CPC分类号： H04L41/0816 , H04L43/0852 , H04L61/1511 , H04L61/6004
摘要： Systems, methods, and computer-readable mediums are provided that access a set of data related to a plurality of domain name system (DNS) requests for a plurality of subnets in a network. A subset of the set of data that is a representative sample of the set of data is selected. Latency of the subset of the data is estimated and latency is estimated for the totality of the data. A portion of the network is modified based on the estimated latency of the totality of the data.
摘要翻译：提供了系统，方法和计算机可读介质，其访问与网络中的多个子网的多个域名系统（DNS）请求相关的一组数据。选择作为该组数据的代表性样本的数据集的子集。估计数据子集的延迟，并估计数据的总数。基于所估计的数据总和的等待时间来修改网络的一部分。

4. 发明授权

US10250618B2 Active validation for DDoS and SSL DDoS attacks 有权
公开(公告)号：US10250618B2
公开(公告)日：2019-04-02
申请号：US15092165
申请日：2016-04-06
申请人： VERISIGN, INC.
发明人： Suresh Bhogavilli , Roberto Guimaraes , Ramakant Pandrangi , Frank Scalzo
IPC分类号： H04L29/06 , H04L9/08 , H04L29/08
摘要： Methods and systems for detecting and responding to Denial of Service (“DoS”) attacks comprise: detecting a DoS attack or potential DoS attack against a first server system comprising one or more servers; receiving, at a second server system comprising one or more servers, network traffic directed to the first server system; subjecting requesting clients to one or more challenge mechanisms, the challenge mechanisms including one or more of challenging requesting clients to follow through HTTP redirect responses, challenging requesting clients to request Secure Sockets Layer (SSL) session resumption, or challenging requesting clients to store and transmit HTTP cookies; identifying one or more non-suspect clients; and forwarding, by the second server system, traffic corresponding to the one or more non-suspect clients to the first server system. Once a client has been validated, clients may communicate directly with application servers in a secure manner by transparently passing through intermediary proxy servers.

5. 发明授权

US10855719B2 Automated DDOS attack mitigation via BGP messaging 有权
公开(公告)号：US10855719B2
公开(公告)日：2020-12-01
申请号：US15273510
申请日：2016-09-22
申请人： VERISIGN, INC.
发明人： Ramin Ali Dousti , Frank Scalzo , Suresh Bhogavilli
IPC分类号： H04L29/06
摘要： Various embodiments of the invention disclosed herein provide techniques for mitigating a distributed denial of service (DDoS) attack on a targeted computer system. A border gateway protocol (BGP) controller receives, via a first router, a BGP message that includes an indicator indicating that a computer system associated with the first router is under a DDoS attack. In response to receiving the BGP message, the BGP controller, in performs one or more operations to mitigate the DDoS attack. As a result, the time between detection of a DDoS attack and mitigating the attack is reduced relative to prior approaches. After receiving the BGP message indicating a DDoS attack is in progress, the DDoS attack mitigation platform automatically takes steps to mitigate the DDoS attack without further manual intervention. Consequently, the targeted computer system recovers more quickly and begins to respond to legitimate network requests sooner relative to prior approaches.

6. 发明授权

US10721117B2 Resilient domain name service (DNS) resolution when an authoritative name server is unavailable 有权
公开(公告)号：US10721117B2
公开(公告)日：2020-07-21
申请号：US15670747
申请日：2017-08-07
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, Jr. , Shumon Huque , Eric Osterweil , Frank Scalzo , Duane Wessels , Glen Wiley
IPC分类号： H04L12/24 , H04L29/12 , H04W24/04 , H04L29/14
摘要： A resolution resiliency application performs robust domain name system (DNS) resolution. In operation, the resolution resiliency application determines that an authoritative name server that is responsible for a domain name specified in a DNS query is unavailable. In response to determining that the authoritative name server is unavailable, the resolution resiliency application performs operation(s) that modify one or more DNS records stored in a cache based on one or more resiliency policies associated with the authoritative name server. The resolution resiliency application then generates a DNS response to the DNS query based on a DNS record stored in the modified cache. Notably, the disclosed techniques increase the likelihood of providing clients with DNS responses that accurately provide requested information.

7. 发明授权

US10050831B2 Query latency of a DNS service 有权
公开(公告)号：US10050831B2
公开(公告)日：2018-08-14
申请号：US15054894
申请日：2016-02-26
申请人： VERISIGN, INC.
发明人： Yannis Labrou , Frank Scalzo , Ramakant Pandrangi
IPC分类号： H04L12/24 , H04L29/12 , H04L12/26
摘要： Systems, methods, and computer-readable mediums are provided that access a set of data related to a plurality of domain name system (DNS) requests for a plurality of subnets in a network. A subset of the set of data that is a representative sample of the set of data is selected. Latency of the subset of the data is estimated and latency is estimated for the totality of the data. A portion of the network is modified based on the estimated latency of the totality of the data.

8. 发明申请

US20160226896A1 ACTIVE VALIDATION FOR DDOS AND SSL DDOS ATTACKS 审中-公开
标题翻译： DDOS和SSL DDOS攻击的主动验证
公开(公告)号：US20160226896A1
公开(公告)日：2016-08-04
申请号：US15092165
申请日：2016-04-06
申请人： VERISIGN, INC.
发明人： Suresh Bhogavilli , Roberto Guimaraes , Ramakant Pandrangi , Frank Scalzo
IPC分类号： H04L29/06 , H04L9/08 , H04L29/08
CPC分类号： H04L63/1416 , H04L9/0825 , H04L63/0428 , H04L63/1458 , H04L67/02 , H04L2463/141 , H04L2463/144
摘要： Methods and systems for detecting and responding to Denial of Service (“DoS”) attacks comprise: detecting a DoS attack or potential DoS attack against a first server system comprising one or more servers; receiving, at a second server system comprising one or more servers, network traffic directed to the first server system; subjecting requesting clients to one or more challenge mechanisms, the challenge mechanisms including one or more of challenging requesting clients to follow through HTTP redirect responses, challenging requesting clients to request Secure Sockets Layer (SSL) session resumption, or challenging requesting clients to store and transmit HTTP cookies; identifying one or more non-suspect clients, the one or more suspect clients corresponding to requesting clients that successfully complete the one or more challenge mechanisms; identifying one or more suspect clients, the one or more suspect clients corresponding to requesting clients that do not successfully complete the one or more challenge mechanisms; and forwarding, by the second server system, traffic corresponding to the one or more non-suspect clients to the first server system. Once a client has been validated, clients may communicate directly with application servers in a secure manner by transparently passing through one or more intermediary proxy servers.
摘要翻译：用于检测和响应拒绝服务（“DoS”）攻击的方法和系统包括：检测对包括一个或多个服务器的第一服务器系统的DoS攻击或潜在DoS攻击; 在包括一个或多个服务器的第二服务器系统处接收指向所述第一服务器系统的网络流量; 对请求客户端进行一个或多个挑战机制，挑战机制包括一个或多个挑战性请求客户端遵循HTTP重定向响应，挑战请求客户端请求安全套接字层（SSL）会话恢复，或挑战请求客户端存储和发送 HTTP Cookie; 识别一个或多个非可疑客户端，所述一个或多个可疑客户端对应于成功完成所述一个或多个挑战机制的请求客户端; 识别一个或多个可疑客户端，所述一个或多个可疑客户端对应于未成功完成所述一个或多个挑战机制的请求客户端; 以及由所述第二服务器系统将对应于所述一个或多个非可疑客户端的流量转发到所述第一服务器系统。一旦客户端被验证，客户端可以通过透明地通过一个或多个中间代理服务器以安全的方式直接与应用服务器通信。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式