公开(公告)号：US20180262516A1

公开(公告)日：2018-09-13

申请号：US15754617

申请日：2015-08-28

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Loai Zomlot ,  Pratyusa K. Manadhata

IPC: H04L29/06 ,  H04L29/12

CPC classification number: H04L63/14 ,  H04L61/1511 ,  H04L63/1425

Abstract: Example embodiments disclosed herein relate to propagating belief information about malicious and benign nodes. In one example, a domain name system (DNS) resolution graph including multiple nodes is determined. In this example, a first subset of nodes is determined based on an initial benign value or an initial unknown value associated with the respective nodes. In the example, benign belief information is propagated for the first subset based on the respective initial benign values. Moreover, in the example, a second subset of the nodes is determined based on an initial malicious value or an initial unknown value. Malicious belief information is propagated for the second subset based on the respective malicious values. The propagated belief information is copied to a DNS resolution graph.

公开(公告)号：US11128641B2

公开(公告)日：2021-09-21

申请号：US15754617

申请日：2015-08-28

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Loai Zomlot ,  Pratyusa K. Manadhata

IPC: H04L29/00 ,  H04L29/06 ,  H04L29/12

Abstract: Example embodiments disclosed herein relate to propagating belief information about malicious and benign nodes. In one example, a domain name system (DNS) resolution graph including multiple nodes is determined. In this example, a first subset of nodes is determined based on an initial benign value or an initial unknown value associated with the respective nodes. In the example, benign belief information is propagated for the first subset based on the respective initial benign values. Moreover, in the example, a second subset of the nodes is determined based on an initial malicious value or an initial unknown value. Malicious belief information is propagated for the second subset based on the respective malicious values. The propagated belief information is copied to a DNS resolution graph.