US 12,309,120 B2
Detecting homographs of domain names
Femi Olumofin, Cupertino, CA (US)
Assigned to Infoblox Inc., Santa Clara, CA (US)
Filed by Infoblox Inc., Santa Clara, CA (US)
Filed on Jan. 11, 2024, as Appl. No. 18/410,733.
Application 18/410,733 is a continuation of application No. 17/827,150, filed on May 27, 2022, granted, now 11,909,722.
Application 17/827,150 is a continuation of application No. 16/248,357, filed on Jan. 15, 2019, granted, now 11,388,142, issued on Jul. 12, 2022.
Prior Publication US 2024/0163256 A1, May 16, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 40/30 (2020.01); G06N 3/04 (2023.01); G06N 3/08 (2023.01); H04L 61/4511 (2022.01); H04L 101/30 (2022.01); H04L 101/33 (2022.01)
CPC H04L 63/0263 (2013.01) [G06F 40/30 (2020.01); G06N 3/04 (2013.01); G06N 3/08 (2013.01); H04L 61/4511 (2022.05); H04L 63/0236 (2013.01); H04L 2101/30 (2022.05); H04L 2101/33 (2022.05)] 18 Claims
OG exemplary drawing
 
1. A system, comprising:
a processor configured to:
receive a DNS data stream, wherein the DNS data stream includes a DNS query and a DNS response for resolution of the DNS query;
apply a homograph detector for each domain in the DNS data stream; and
detect a homograph of a domain name in the DNS data stream using the homograph detector, wherein the homograph detector is generated using a deep neural network technique and training data, and wherein the deep neural network technique includes a recurrent neural network (RNN) technique, a K-Means clustering technique, a support vector machine (SVM) technique or any combination thereof; and
a memory coupled to the processor and configured to provide the processor with instructions.