公开(公告)号：US10834114B2

公开(公告)日：2020-11-10

申请号：US16219472

申请日：2018-12-13

Applicant: AT&T Intellectual Property I, L.P.

Inventor： Anestis Karasaridis ,  Eric Noel ,  Stephen Chou ,  Patrick Velardo

IPC: H04L29/06 ,  H04L29/12 ,  H04L12/24 ,  G06N3/08 ,  G06N3/04

Abstract: A processing system having at least one processor may obtain domain name system (DNS) traffic records of a DNS platform, the DNS traffic records associated with a source device having a first status and that is submitting DNS queries, where a first-tier DNS authoritative server of the DNS platform is configured to forward the DNS queries from the source device to at least a first second-tier DNS authoritative server of the DNS platform designated for the first status. The processing system may further detect anomalous DNS traffic records from the DNS traffic records, identify a change of the source device from a first status to a second status, based upon the detecting the anomalous DNS traffic records, and reconfigure the first-tier DNS authoritative server to redirect the DNS queries from the source device to at least a second second-tier DNS authoritative server designated for the second status.