Colleen A Shannon

US Patent:

20130014253, Jan 10, 2013

Filed:

Jul 6, 2011

Appl. No.:

13/177504

Inventors:

Vivian Neou - Menlo Park CA, US
Robert S. Wilbourn - Palo Alto CA, US
Handong Wu - Marietta GA, US
Eileen Liu - Saratoga CA, US
Colleen Shannon - Redwood City CA, US
Sam Bretheim - Berkeley CA, US

International Classification:

G06F 21/20
G06F 15/173

US Classification:

726 22

Abstract:

A network protection method is provided. The network protection method may include receiving a Domain Name System (DNS) request, logging the DNS request, classifying the DNS request based on an analysis of a DNS name associated with the DNS request, taking a security action based on the classification, analyzing network traffic after taking the security action, and providing substantially real-time feedback associated with the network traffic to improve future DNS request classifications. The method may further include receiving a DNS response and logging the DNS response. The analysis of the DNS name may include receiving DNS data related to the DNS name from a plurality of sources, receiving reputation data related to the plurality of sources, scoring each of the plurality of sources based on the reputation data, and aggregating the DNS data related to the DNS name based on the scoring.