Title:
CLOUD-BASED ANOMALOUS TRAFFIC DETECTION AND PROTECTION IN A REMOTE NETWORK VIA DNS PROPERTIES
Document Type and Number:
WIPO Patent Application WO/2019/138294
Kind Code:
A1
Abstract:
A central platform remote from a local network can detect anomalies on the local network. The central platform can assign a unique pair of DNS server IP addresses to the local network. The central platform can receive configuration data from the local network and use the configuration data and the assigned pair of DNS server IP addresses to uniquely identify devices on the local network. In the case that current network flow statistics do not match expected network flow statistics for the local network, a device causing the anomalous behavior can be identified using the assigned pair of DNS server IP addresses and configuration data.
More Like This:
Inventors:
ANAKATA JOE (US)
GUPTA RAJARSHI (US)
GUPTA RAJARSHI (US)
Application Number:
PCT/IB2019/000047
Publication Date:
July 18, 2019
Filing Date:
January 10, 2019
Export Citation:
Assignee:
AVAST SOFTWARE SRO (CZ)
International Classes:
H04L29/06; H04L29/12
Domestic Patent References:
| WO2016164050A1 | 2016-10-13 |
Foreign References:
| US20140304378A1 | 2014-10-09 | |||
| US20110202665A1 | 2011-08-18 |
Other References:
None
Attorney, Agent or Firm:
MAATZ-JANSEN, Gero (DE)
Download PDF: