Patent ID: 8869272
Filing Date: 2014-10-21
Classification: G06F,H04L

Abstract:
1. At least one non-transitory tangible computer readable storage medium having instructions stored thereon, the instructions when executed on a machine cause the machine to: detect an attempt for modification of a domain name system setting; identify an attribute of the modification; verify a source of the attempt by executing a hash in order to compare the source against a whitelist that includes predetermined non-malicious sources; verify the attribute of the modification by comparing the attribute of the modification against at least one of a whitelist containing known good attributes and a blacklist containing known at least potentially malicious attributes; prevent the modification to the domain name system setting when the verifying of the source of the attempt is indicative that the source is a potentially malicious source and the verifying of the attribute of the modification is indicative that the attribute of the modification is a potentially malicious attribute.