-
1.发明申请DNS SNOOPING TO CREATE IP ADDRESS-BASED TRUST DATABASE USED TO SELECT DEEP PACKET INSPECTION AND STORAGE OF IP PACKETS 有权DNS SNOOPING创建基于IP地址的信任数据库，用于选择IP包的深度分组检查和存储公开(公告)号：US20160373409A1
公开(公告)日：2016-12-22
申请号：US14746155
申请日：2015-06-22
Applicant: Cisco Technology, Inc.
Inventor： Peter Zhu , Ashok Thirunarayanan
CPC classification number: H04L63/0236 , G06F17/30289 , G06F17/30914 , H04L61/1511 , H04L61/2007 , H04L63/0245 , H04L69/22 , H04L69/329
Abstract: At a network device through which client devices communicate with a network, a database is created that maps Internet Protocol (IP) addresses each to a respective trust metric for a domain name associated with the IP address. An IP packet sent from a client device to the network and that indicates a destination IP address for a network-accessible resource associated with a domain name is intercepted. Using the destination IP address in the intercepted IP packet, the domain name trust metric mapped to the destination IP address is retrieved from the database. IP packets received from the destination IP address are processed based on the retrieved domain name trust metric and a predetermined trust metric criterion.
Abstract translation: 在客户端设备通过网络与网络进行通信的网络设备上，创建将互联网协议（IP）地址分别映射到与IP地址相关联的域名的相应信任度量的数据库。 从客户端设备发送到网络并且指示与域名相关联的网络可访问资源的目的地IP地址的IP分组被截获。 在拦截的IP包中使用目的地IP地址，从数据库中检索映射到目标IP地址的域名信任度量。 基于检索到的域名信任度量和预定的信任度量标准来处理从目的地IP地址接收到的IP分组。
-
公开(公告)号：US09628442B2
公开(公告)日：2017-04-18
申请号：US14746155
申请日：2015-06-22
Applicant: Cisco Technology, Inc.
Inventor： Peter Zhu , Ashok Thirunarayanan
CPC classification number: H04L63/0236 , G06F17/30289 , G06F17/30914 , H04L61/1511 , H04L61/2007 , H04L63/0245 , H04L69/22 , H04L69/329
Abstract: At a network device through which client devices communicate with a network, a database is created that maps Internet Protocol (IP) addresses each to a respective trust metric for a domain name associated with the IP address. An IP packet sent from a client device to the network and that indicates a destination IP address for a network-accessible resource associated with a domain name is intercepted. Using the destination IP address in the intercepted IP packet, the domain name trust metric mapped to the destination IP address is retrieved from the database. IP packets received from the destination IP address are processed based on the retrieved domain name trust metric and a predetermined trust metric criterion.
-
Search Results
2
records
(took 0.009 seconds)
