Level 3 Communications, LLC

Lisa Lamanna

Dean Ballew

John R B Woodworth

Dan Luther

James C Anders

Carol Dawn Lovell

Novel tools and techniques are provided for implementing improvement to domain name system ('DNS') security. In various embodiments, a computing system may receive a user datagram protocol (“UDP”)-based DNS request, and may send a UDP-based response message, which may include an empty payload portion and a header portion containing a truncate flag that is set, which indicates to resend the request as a transmission control protocol (“TCP”)-based DNS request. When the TCP-based DNS request is received within a first period, the computing system may send, to the source address, a TCP-based response message comprising an answer to a query (in the TCP-based DNS request) for a destination DNS record associated with a destination device. If no TCP-based DNS request is received from the source address within the first period, the computing system may block all UDP-based DNS requests from the source address for at least a second period.

Growing community of inventors

Harrisonburg, VA, United States of America

Lisa Lamanna