Arlyn Robert Johns

US Patent:

20160099967, Apr 7, 2016

Filed:

Oct 7, 2014

Appl. No.:

14/508400

Inventors:

- San Francisco CA, US
Arlyn Robert Johns - Oakland CA, US

International Classification:

H04L 29/06

Abstract:

A method includes receiving a set of strings and applying one or more filters to generate a subset of strings that are determined to correspond to strings of interest. The method also includes retrieving domain name system (DNS) information associated with a first string of the subset. The method includes executing a rule-based engine to determine, based on application of one or more rules to the DNS information, whether to add the first string to a set of suspicious hostnames.