Login| Sign Up| Help| Contact|

Patent Searching and Data


Title:
COMMUNICATION DEVICE
Document Type and Number:
WIPO Patent Application WO/2020/158896
Kind Code:
A1
Abstract:
The present invention relates to a communication device which determines, when a terminal connected to a network accesses a server device, whether the server device is a malicious host. The terminal transmits to a DNS server a name resolution request including an absolute domain name of the server device, and starts communication with the server device on the basis of a name resolution result transmitted from the DNS server. The communication device is provided with a determination unit which determines whether the server device is a malicious host, and, upon receiving the name resolution request transmitted to the DNS server, determines whether the server device is a malicious host on the basis of the absolute domain name included in the name resolution request. At this time, the name resolution request is transmitted to the DNS server regardless of whether a determination result as to whether the server device is a malicious host has been derived. Further, upon receiving a name resolution result from the DNS server, the communication device determines whether the server device is a malicious host on the basis of the determination result.

Inventors:
OKADA KAZUYA (JP)
Application Number:
PCT/JP2020/003542
Publication Date:
August 06, 2020
Filing Date:
January 30, 2020
Export Citation:
Click for automatic bibliography generation   Help
Assignee:
UNIV TOKYO (JP)
International Classes:
H04L12/66
Other References:
AKIHIRO SATOH: "D N S Clustering Malicious DNS Queries Detected by Using Blacklists", IEICE TECHNICAL REPORT, vol. 1 1 8 N, no. 6 0, 6 December 2018 (2018-12-06), pages 17 - 22, XP055728652
RUI TANABE, I R U S TOTAL DETECTING MALICIOUS DOMAINS USING VIRUS TOTAL AN INTEGRATED MALWARE ANALYSIS SERVICE, vol. 59, no. 9, 15 September 2018 (2018-09-15)
Attorney, Agent or Firm:
TAKAYAMA, Hiroshi (JP)
Download PDF: