EVALUATION OF DNS PRE-REGISTRATION DATA TO PREDICT FUTURE DNS TRAFFIC
First Claim
1. A method for predicting future network traffic, comprising:
- receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time;
determining the size of each of the plurality of name servers, the size of a name server being proportional to the total number of NXD requests sent by the name server; and
based on at least the determined sizes of the plurality of name servers and received NXD requests, predicting at least one of an expected name-in-use response level for the one or more candidate domains, an expected click traffic for the one or more candidate domain, or a combination thereof.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods and systems analyze historical NXD traffic to predict future DNS traffic. In one embodiment, a system may count NXD responses generated by an Authoritative DNS server during a particular time period and calculate the variance in NXD traffic for domains over time. The system may then generate a coefficient of variance (CoV) value for each domain observed. Finally, the system may predict positive domain traffic based upon the calculated CoV data. In other embodiments, the system may also base the prediction on the classification of domains as “original” domains or “re-registered” domains. In another embodiment, the system may also base the prediction on the “size” of name servers. Additionally, or alternatively, the system may determine the number of unique name servers for a domain and base the prediction on the number of unique name servers for a particular domain name.
-
Citations
30 Claims
-
1. A method for predicting future network traffic, comprising:
-
receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time; determining the size of each of the plurality of name servers, the size of a name server being proportional to the total number of NXD requests sent by the name server; and based on at least the determined sizes of the plurality of name servers and received NXD requests, predicting at least one of an expected name-in-use response level for the one or more candidate domains, an expected click traffic for the one or more candidate domain, or a combination thereof. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A device for predicting future network traffic, comprising:
-
a memory containing instructions; and at least one processor, operably connected to the memory, the executes the instructions to perform a method comprising; receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time; determining the size of each of the plurality of name servers, the size of a name server being proportional to the total number of NXD requests sent by the name server; and based on at least the determined sizes of the plurality of name servers and received NXD requests, predicting at least one of an expected name-in-use response level for the one or more candidate domains, an expected click traffic for the one or more candidate domain, or a combination thereof. - View Dependent Claims (8, 9, 10, 11, 12)
-
-
13. A computer readable storage medium comprising instructions for causing one or more processors to perform a method, the method for predicting future network traffic, comprising:
-
receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time; determining the size of each of the plurality of name servers, the size of a name server being proportional to the total number of NXD requests sent by the name server; and based on at least the determined sizes of the plurality of name servers and received NXD requests, predicting at least one of an expected name-in-use response level for the one or more candidate domains, an expected click traffic for the one or more candidate domain, or a combination thereof. - View Dependent Claims (14, 15, 16, 17, 18)
-
-
19. A method for predicting future network traffic, comprising:
-
receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time; identifying each of the one or more candidate domains as an Original Domain or as a Re-registered domain; and based on at least the identification and received NXD requests, predicting at least one of expected name-in-use response levels for the one or more candidate domains, expected click traffic for the one or more candidate domains, or a combination thereof. - View Dependent Claims (20, 21)
-
-
22. The method of 19, further comprising:
-
determining whether the received NXD requests for Re-registered domains are associated with machine-generated internet activity; filtering the received NXD requests to remove NXD requests associated with machine-generated internet activity for Re-registered domains; and making the prediction based on at least the identification and filtered NXD requests.
-
-
23. A device for predicting future network traffic, comprising:
-
a memory containing instructions; and at least one processor, operably connected to the memory, the executes the instructions to perform a method comprising; receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time; identifying each of the one or more candidate domains as an Original Domain or as a Re-registered domain; and based on at least the identification and received NXD requests, predicting at least one of expected name-in-use response levels for the one or more candidate domains, expected click traffic for the one or more candidate domains, or a combination thereof. - View Dependent Claims (24, 25)
-
-
26. The device of 23, wherein the at least one processor is further operable to execute the method comprising:
-
determining whether the received NXD requests for Re-registered domains are associated with machine-generated internet activity; filtering the received NXD requests to remove NXD requests associated with machine-generated internet activity for Re-registered domains; and making the prediction based on at least the identification and filtered NXD requests.
-
-
27. A computer readable storage medium comprising instructions for causing one or more processors to perform a method, the method for predicting future network traffic, comprising:
-
receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time; identifying each of the one or more candidate domains as an Original Domain or as a Re-registered domain; and based on at least the identification and received NXD requests, predicting at least one of expected name-in-use response levels for the one or more candidate domains, expected click traffic for the one or more candidate domains, or a combination thereof. - View Dependent Claims (28, 29)
-
-
30. The computer readable storage medium of 27, further comprising:
-
determining whether the received NXD requests for Re-registered domains are associated with machine-generated internet activity; filtering the received NXD requests to remove NXD requests associated with machine-generated internet activity for Re-registered domains; and making the prediction based on at least the identification and filtered NXD requests.
-
Specification