Patent ID: 11876775
Assignee: ARBOR NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 10:
11. The method as recited in claim 10, wherein the Time-Decaying Bloom filter is updated upon receiving a tuple, and based on the user configuration, the following steps are performed: 1) map the IP address corresponding to the DNS name to a internet service; 2) look up the Time-Coded Bloom filter (F) corresponding to internet service in the indexed entries; 3) using M different hash functions, generate M hash values for the pair and denote these as H1, . . . HM; 4) compute a filter array index for each hash value and denote these array indices as I1, . . . IM; 5) round each TTL value up to the next multiple of PERIOD to obtain R_TTL; and 6) for each array index i in {I1. . . IM}:F[i]:=MAX(F[i], R_TTL).