Palo Alto Networks, Inc.

Fan Fei

Daiping Liu

Wei Xu

Jun Wang

Martin Walter

Seokkyung Chung

Suquan Li

Ben Hua

Zhanhao Chen

Wanjin Li

Detection of algorithmically generated domains is disclosed. A DNS query is received. Markov Chain analysis is performed on a domain included in the received query. A determination of whether the received query implicates an algorithmically generated domain is made based at least in part on a result of the Markov Chain analysis.

In-line detection of algorithmically generated domains

Detection of strategically aged domains is detected. A list of aged dormant domains is determined, including by evaluating passive Domain Name System (DNS) information. The list of aged dormant domains is monitored for a change by an aged dormant domain from a dormant domain status to an active status. In response to determining the change to active status of the aged dormant domain, an action is taken with respect to the aged dormant domain.

Strategically aged domain detection

Growing community of inventors

San Jose, CA, United States of America

Fan Fei