Managing domain name abuse
A method for providing an abuse sentry service for responding to domain name abuse is described. The method comprises the following steps. A plurality of disparate abuse feeds is received, each comprising data relating to a subset of potential domain name abuse. Filters are applied to the data to create a custom abuse feed. Data from the custom abuse feed is grouped based on priority levels. For each of the groups, one or more corresponding workflows are executed as a response to the potential domain name abuse. A computer readable medium including instructions for implementing the method is also described.
1. A method for providing an abuse sentry service for responding to domain name abuse, comprising the steps of:
receiving, at a computer, a plurality of disparate abuse feeds from a plurality of service providers, each of the plurality of service providers configured to collect information regarding a subset of potential domain name abuse, each of the plurality of disparate abuse feeds comprising data identifying domain names associated with the subset of potential domain name abuse;
applying one or more filters to the data to create a custom abuse feed, the custom abuse feed comprising a selective portion of one of more of the plurality of disparate abuse feeds;
grouping the filtered data from the custom abuse feed into groups of data based on predefined priority levels of the filtered data; and
for each of the groups of data, executing one or more corresponding workflows as a response to the potential domain name abuse.
2. The method of claim 1 , wherein the filters are predefined, customized or a combination thereof.
3. The method of claim 1 , wherein each of the plurality of disparate abuse feeds has an associated reliability level.
4. The method of claim 3 , wherein the reliability level is assigned by an abuse service generating the abuse feed, a trusted third party, the abuse sentry service or any combination thereof.
5. A non-transitory computer readable medium having stored thereon instructions for execution by a computing device, which when executed cause the computing device to implement the steps of:
receiving a plurality of disparate abuse feeds from a plurality of service providers, each of the plurality of service providers configured to collect information regarding a subset of potential domain name abuse, each of the plurality of disparate abuse feeds comprising data identifying domain names associated with a the subset of potential domain name abuse;
applying one or more filters to the data to create a custom abuse feed comprising a selective portion of one of more of the plurality of disparate abuse feeds;
grouping the filtered data from the custom abuse feed into groups of data based on predefined priority levels of the filtered data; and
for each of the groups of data, executing one or more corresponding workflows as a response to the potential domain name abuse.
6. The non-transitory computer readable medium of claim 5 , wherein the filters are predefined, customized or a combination thereof.
7. The non-transitory computer readable medium of claim 5 , wherein each of the plurality of disparate abuse feeds has an associated reliability level.
8. The non-transitory computer readable medium of claim 7 , wherein the reliability level is assigned by an abuse service generating the abuse feed, a trusted third party, the abuse sentry service or any combination thereof.