The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 05, 2026

Filed:

Apr. 18, 2022
Applicant:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Inventors:

Janos Szurdi, Sunnyvale, CA (US);

Weihan Jiang, San Jose, CA (US);

David Qianshan He, Cupertino, CA (US);

Assignee:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G06F 16/353 (2025.01);
U.S. Cl.
CPC ...
H04L 63/0245 (2013.01); G06F 16/353 (2019.01); H04L 63/0236 (2013.01); H04L 63/1416 (2013.01);
Abstract

A system and method for detecting dictionary-based DGA traffic is provided. A domain name system (DNS) stream is received. The DNS stream is classified using a per domain dictionary domain generation algorithm (DGA) classifier to generate candidate dictionary DGA domains with cluster information. The candidate dictionary DGA domains are filtered to generate a set of dictionary DGA domains. An action is performed based on a match with a monitored domain name of a monitored DNS request and a dictionary DGA domain of the set of dictionary DGA domains.


Find Patent Forward Citations

Loading…