Patent ID: 8955123
Filing Date: 2015-02-10
Classification: H04L

Abstract:
1. Method comprising: receiving at least one specific Internet Protocol (IP) address and a Time to Live (TTL) threshold value thereof; receiving a new IP address and a TTL value, wherein the TTL value is the time to live value of the new IP address and obtained through a domain name server (DNS) or a dynamic DNS (DDNS); determining whether the new IP address corresponds to the at least one specific IP address; determining whether the TTL value is smaller than or equal to the TTL threshold value; and redirecting as a malicious communication to a redirected IP address when at least one of the following conditions is met: (1) when determining that the new IP address corresponds to the at least one specific IP address is “True”; and (2) when determining that the TTL value is smaller than or equal to the TTL threshold value is “True”.