Infoblox has patented a system for automated identification of false positives in DNS tunneling detectors. The system receives passive DNS data, extracts features for each domain, and classifies DNS tunneling activities to reduce false positives. The processor uses a model trained with known tunnel domains for classification. GlobalData’s report on Infoblox gives a 360-degree view of the company including its patenting strategy. Buy the report here.
Access deeper industry intelligence
Experience unmatched clarity with a single platform that combines unique data, AI, and human expertise.
According to GlobalData’s company profile on Infoblox, Network traffic analysis was a key innovation area identified from patents. Infoblox's grant share as of April 2024 was 81%. Grant share is based on the ratio of number of grants to total number of patents.
Automated identification of false positives in dns tunneling detectors
A recently granted patent (Publication Number: US11916942B2) discloses a system designed to detect and classify DNS tunneling activities while reducing false positives. The system includes a processor that receives passive DNS data, extracts various features associated with each domain, and uses these features to classify DNS tunneling activities. The classification process involves distinguishing between DNS tunnels and non-tunnels using a model trained on known tunnel domains and non-tunnel domains. Additionally, the system can perform a mitigation action in response to detecting malicious DNS tunneling activities, enhancing cybersecurity measures.
Furthermore, the patent claims cover methods and computer program products that mirror the system's functionality. These include preprocessing passive DNS data to filter domains automatically, utilizing name server information and retransmission rates as features for classification, and implementing mitigation actions upon detecting malicious DNS tunneling activities. By leveraging a model trained on known tunneling behaviors, the system aims to improve the accuracy of identifying DNS tunneling activities and reducing false positives in cybersecurity operations. This innovative approach underscores the importance of proactive measures in addressing potential security threats in network communications.
To know more about GlobalData’s detailed insights on Infoblox, buy the report here.
Data Insights
From
The gold standard of business intelligence.
Blending expert knowledge with cutting-edge technology, GlobalData’s unrivalled proprietary data will enable you to decode what’s happening in your market. You can make better informed decisions and gain a future-proof advantage over your competitors.

