Distinguishing human-driven DNS queries from machine-to-machine DNS queries
The present disclosure is related to a computer-implemented method and system for distinguishing human-driven Doman Name System (DNS) queries from Machine-to-Machine (M2M) DNS queries. The method includes receiving a DNS query, which includes a domain name, generating a probability score for the domain name based on one or more predetermined rules, and categorizing the DNS query as a human-driven DNS query or a M2M DNS query based on the probability score.
1. A non-transitory processor-readable medium having instructions stored thereon, which when executed by one or more processors, cause the one or more processors to implement a method, comprising:
receiving a Domain Name System (DNS) query, wherein the DNS query includes a domain name;
applying one or more predetermined rules to the domain name, the outcome of each of the one or more predetermined rules affecting a probability generated by the one or more processors to determine whether to categorize the DNS query as a human-driven DNS query and not a Machine-to-Machine (M2M) DNS query; and,
based on the application of the one or more predetermined rules and the generated probability, categorizing the DNS query as a human-driven DNS query and not a Machine-to-Machine (M2M) DNS query.
2. The non-transitory processor-readable medium of claim 1 , wherein the one or more predetermined rules include comparing the domain name to records of a DNS query dictionary.
3. The non-transitory processor-readable medium of claim 1 , wherein the one or more predetermined rules include determining that the domain name is associated with a front-end domain name and not with a backend domain name.
4. The non-transitory processor-readable medium of claim 1 , wherein the one or more predetermined rules include determining that the domain name has a “www” prefix.
5. The non-transitory processor-readable medium of claim 1 , wherein the one or more predetermined rules include determining that the DNS query is addressed to a Content Delivery Network (CDN).
6. The non-transitory processor-readable medium of claim 1 , wherein the one or more predetermined rules include ranking the domain name associated with the DNS query.
7. A computer-implemented system for processing (Domain Name System) DNS queries, the computer-implemented system comprising at least one processor and at least one memory storing processor-executable codes, wherein the at least one processor is configured to:
receive a DNS query, wherein the DNS query includes a domain name;
applying one or more predetermined rules to the domain name, the outcome of each of the one or more predetermined rules affecting a probability generated by the computer-implemented system to determine whether to categorize the DNS query as a human-driven DNS query and not a M2M DNS query; and
based on the application of the one or more predetermined rules and the generated probability, categorize the DNS query as a human-driven DNS query and not a M2M DNS query.
8. A non-transitory processor-readable medium having instructions stored thereon, which when executed by one or more processors, cause the one or more processors to implement a method, comprising:
receiving a (Domain Name System) DNS query, wherein the DNS query includes a domain name;
applying one or more predetermined rules to the domain name, the outcome of each of the one or more predetermined rules affecting a probability generated by the one or more processors to determine whether to categorize the DNS query as a machine-to-machine (M2M) DNS query and not a human-driven DNS query; and
based on the application of the one or more predetermined rules and the generated probability, categorizing the DNS query as a M2M DNS query and not a human-driven DNS query.