Patent ID: 11930020
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 1:
2. The method of claim 1, wherein the method further comprises:
accessing historical NT data that encodes at least one historical DNR transaction associated with a plurality of historical addresses that includes a plurality of historical DNS addresses and at least one historical target address, each historical DNR transaction of the at least one historical DNR transaction occurred prior to each DNR transaction of the at least one DNR transaction;
employing the historical NT data to generate a historical graph data structure including a plurality of historical nodes with each historical node representing a historical address from the plurality of historical addresses and a plurality of historical edges, the plurality of historical nodes including a plurality of historical DNS nodes with each historical DNS node representing a historical DNS address from the plurality of historical DNS addresses and at least one historical target node representing the at least one historical target address, and at least one historical edge from the plurality of historical edges connecting each of the plurality of historical DNS nodes to at least one of the at least one historical target node based on the at least one historical DNR transaction; and
based on a comparison between the graph data structure and the historical graph data structure, assigning the node risk score to each node of the plurality of nodes.