The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Apr. 03, 2018

Filed:

Mar. 05, 2014
Applicant:

The University of North Carolina AT Chapel Hill, Chapel Hill, NC (US);

Inventors:

Fabian Monrose, Chapel Hill, NC (US);

Teryl Taylor, Carrboro, NC (US);

Srinivas Krishnan, Berkeley, CA (US);

John McHugh, Saluda, NC (US);

Assignee:
Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); G06F 21/57 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
G06F 21/562 (2013.01); G06F 21/57 (2013.01); H04L 63/1441 (2013.01); G06F 2221/034 (2013.01); H04L 2463/144 (2013.01);
Abstract

Methods, systems, and computer readable media for detecting a compromised computing host are disclosed. According to one method, the method includes receiving one or more domain name system (DNS) non-existent domain (NX) messages associated with a computing host. The method also includes determining, using a host score associated with one or more unique DNS zones or domain names included in the one or more DNS NX messages, whether the computing host is compromised. The method further includes performing, in response to determining that the computing host is compromised, a mitigation action.


Find Patent Forward Citations

Loading…