Patent ID: 8316440

Claim:
A method of detecting changes to IP addresses obtained from name-to-IP resolutions, comprising the following computer-implemented steps: requesting that a host name be mapped; receiving an IP address, wherein said host name has been mapped to said IP address through a name-to-IP resolution process; searching a historical database using a computer to retrieve historical data related to said IP address; applying a plurality of rules using said computer using said historical data; producing a score for each of the plurality of rules to obtain a plurality of scores, wherein each of the plurality of scores is greater than or equal to 0; summing up the plurality of scores to calculate a total score; storing the host name, the IP address and an IP address of a DNS server in said historical database if the total score is less than or equal to the predefined value, wherein the DNS server performs the name-to-IP resolution process that maps the host name to the IP address; and triggering an alert if the total score is greater than a predefined value.