Abstract: A technique for resolving a uniform resource locator (URL) present on a social network website is presented. The technique includes detecting that a user's computing device is rendering a social network web page on the social network website, detecting a user activation of the URL present on the social network web page, where the URL present on the social network web page includes a domain name, obtaining a domain name system (DNS) resource record for the domain name, detecting, in the DNS resource record for the domain name, an entry for the social network website associated with a destination URL, retrieving content from the destination URL in response to at least the detecting that the user's computing device is rendering the social network web page and the detecting a user activation of the URL present on the social network web page, and causing the content to be displayed.

Abstract: Provided is a method for providing a response to a user query for domain-related information of a domain. The method can include obtaining, at a client over a network, the user query for the domain-related information, and identifying one or more thick services based on thin data for the domain. The method can also include providing, by the client, the user query to the identified one or more thick services and obtaining a first answer to the user query from the one or more thick services. Furthermore, the method can include providing a second answer to a user based on the first answer.

Abstract: Provided are methods, devices, and computer-readable media for accessing a domain name; determining, via the processor, at least two words in the domain name; determining at least one alternative word for at least one word in the domain name; determining whether the at least one alternative word is contextually relevant; and generating at least one alternative domain name based on a determination that the at least one alternative word is contextually relevant.

Abstract: One embodiment of the present invention sets forth a technique for detecting malicious domains via registration profiling. The technique includes receiving domain registration information associated with a plurality of malicious domains and generating a plurality of domain clusters based on the domain registration information. The technique further includes comparing a domain registration profile associated with a candidate domain to the plurality of domain clusters to generate a similarity score and classifying the candidate domain as a malicious domain based on the similarity score.

Abstract: A technique for verifying an origin of a digital object in a digital object architecture is described. The technique includes the steps of receiving, from a handle registry, handle information for a digital object that includes an attestation that references the handle identification value for the handle and origin identification information; verifying the authenticity of the attestation; after verifying the authenticity of the attestation, using the origin information in determining authorizations applicable to the digital object.

Abstract: Embodiments relate to systems, devices, computer-readable media, and computer-implemented methods for generating domain name suggestions by receiving an input string via a user interface, determining an alternative of the input string, determining affixes of the input string, determining top level domains associated with the input string, determining registration availability of domain names including one-step string sequences from the input string based on the alternative input string, the affixes of the input string, and the top level domains associated with the input string, and generating a display for the user interface, where the display includes: the input string, the alternative of the input string, the affixes of the input string, and the top level domains associated with the input string; and indications of the registration availability of the domains names including the one-step string sequences.

Abstract: Techniques for providing domain name suggestions to a user that is a prospective registrant via chatbot are disclosed. The techniques include providing a publicly available online chatbot to the user; requesting domain name generation data from the user via the chatbot and during a chatbot session with the user; receiving domain name generation data based on the requesting; generating a plurality of generated domain names using the domain name generation data; filtering registered domain names out of the plurality of generated domain names to produce a plurality of unregistered generated domain names; offering to register at least one of the unregistered generated domain names to the user; receiving an offer acceptance from the user; directing the user, via the chatbot, to provide information sufficient to register the at least one of the unregistered generated domain names; and facilitating registration of the at least one of the unregistered generated domain names.

Abstract: In various embodiments, a name server transmits a canonical name as resolution to another canonical name. In operation, when a resource name is requested for resolution, a determination is made that the resource name corresponds to a trap resource name. A first canonical name is transmitted as resolution to the trap resource name. The first canonical name is requested for resolution, and a second canonical name is transmitted as resolution. By providing trap canonical names as resolutions to trap canonical names, unauthorized software making the resolution requests is kept occupied with requesting resolution of canonical name after canonical name, impeding the ability of the unauthorized software from traversing a network.

Abstract: The disclosure is directed to providing content access control in information centric networking (ICN) networks. Methods and systems include hardware and/or software that perform operations for sending to a content provider of an ICN network an access request for content in response to receiving a first content request from a client. The operations also include receiving from the content provider access control information for the content. The operations further include sending to the client a challenge. Additionally, the operations include receiving from the client an authorization of the content provider that includes information obtained by the client from the content provider based on the challenge. Furthermore, the operations include verifying the authorization received from the client using the access control information received from the content provider. Moreover, the operations include sending to the client the content.

Abstract: In one embodiment, a domain-name based framework implemented in a digital assistant ecosystem uses domain names as unique identifiers for request types, requesting entities, responders, and target entities embedded in a natural language request. Further, the framework enables interpreting natural language requests according to domain ontologies associated with different responders. A domain ontology operates as a keyword dictionary for a given responder and defines the keywords and corresponding allowable values to be used for request types and request parameters. The domain-name based framework thus enables the digital assistant to interact with any responder that supports a domain ontology to generate precise and complete responses to natural language based requests.

Abstract: A technique for facilitating registration of an internet domain name with the domain name system (DNS) is presented. The technique can include receiving a request to register an encoding domain name with the DNS, the encoding domain name including an indication of a temporal event and of a target domain name. The technique can also include registering the encoding domain name to a registrant, where the registering the encoding domain name confers to the registrant a right to register the target domain name upon specified conditions, where the specified conditions include an occurrence of the temporal event. The technique can also include receiving a request initiated by the registrant to register the target domain name, and registering the target domain name to the registrant after satisfaction of the specified conditions.

Abstract: Various embodiments of the invention disclosed herein provide techniques for mitigating a distributed denial of service (DDoS) attack on a targeted computer system. A border gateway protocol (BGP) controller receives, via a first router, a BGP message that includes an indicator indicating that a computer system associated with the first router is under a DDoS attack. In response to receiving the BGP message, the BGP controller, in performs one or more operations to mitigate the DDoS attack. As a result, the time between detection of a DDoS attack and mitigating the attack is reduced relative to prior approaches. After receiving the BGP message indicating a DDoS attack is in progress, the DDoS attack mitigation platform automatically takes steps to mitigate the DDoS attack without further manual intervention. Consequently, the targeted computer system recovers more quickly and begins to respond to legitimate network requests sooner relative to prior approaches.

Abstract: One embodiment of the present application sets forth a computer-implemented method for establishing trust for handles used to identify digital objects in a digital object architecture (DOA) by associating a first attester identifier with a first attester from a trusted public key infrastructure (PKI), identifying a first digital object public key for a first digital object, generating, by the first attester, a first digital object identity attestation that associates the first digital object public key with a handle identifier for the first digital object, wherein the handle identifier is external to the trusted PKI, and generating a first attester identity attestation attesting that the first attester is authentic, where the first attester identity attestation includes the first attester identifier.

Abstract: A computer device, a computer-readable medium and a computer-implemented method is provided. The computer device and the computer-readable medium perform the computer-implemented method of generating unregistered internet domain names using a trained encoder function and a trained decoder function. The method includes obtaining one or more seed domain names; mapping, using a hardware processor implementing the trained encoder function, the one or more seed domain names in a low-dimensional information-rich latent space; modifying a representation of one domain name of the one or more seed domain names that is encoded in the low-dimensional information-rich latent space; and generating, using the hardware processor implementing the trained decoder function, one or more unregistered domain names for domain name registration from the representation that is modified.

Abstract: Embodiments relate to systems, devices, and computer-implemented methods for managing domain name space collisions by accessing information, such as a domain name string, corresponding to a domain name resolution request and response. Based on at least the domain name string, a type of use value associated with the request can be determined. Based on at least the type of use value, a name collision risk value for the request can be determined. If the name collision risk value indicates there is a specified risk of a domain name string collision, then a domain name collision mitigation strategy can be generated and/or implemented.

Abstract: Provided is a method for providing Registration Data Access Protocol (“RDAP”) responses. The method includes obtaining, at a RDAP client over a network, a RDAP query for RDAP data from a user; providing, by the RDAP client, the RDAP query and a cryptographic credential to a RDAP server, wherein the RDAP server communicates with one or more thick RDAP servers to provide respective thick RDAP answers to the RDAP query, wherein at least one the respective thick RDAP answers are encrypted using a symmetric or asymmetric cryptographic key associated with the cryptographic credential of the RDAP client; obtaining a consolidated thick RDAP answer to the RDAP query from the RDAP server; decrypting the consolidated thick RDAP answer using a symmetric or asymmetric cryptographic key associated with the cryptographic credential; and providing the thick RDAP answer that is decrypted to the user.

Abstract: In one embodiment, a privacy and security engine enables a user to specify a recursive resolver for a domain name service (DNS) resolution process. The privacy and security engine receives default DNS settings that specify a default recursive resolver to be implemented as a recursive resolver for the DNS resolution process. The default DNS settings are provided by an underlying mobile operator network to which the user device is connected. The privacy and security engine causes the user device to disregard the default DNS settings and implement customized DNS settings that specify a preferred recursive resolver to be implemented as the recursive resolver for the DNS resolution process. The customized DNS settings are associated with an activated privacy and security mode. Unlike conventional approaches to overriding DNS settings, the user is able to specify the recursive resolver that implements the DNS resolution process irrespective of the underlying network.

Abstract: Techniques for generating internet domain name suggestions using machine learning are presented. Some techniques include obtaining sets of domain names, each set of domain names including domain names that concern a selected topic, training machine learning algorithms, such that trained language models are produced, each trained language model concerning a different selected topic, obtaining a seed domain name, identifying a primary topic that the seed domain name concerns, applying to the seed domain name a trained language model of the trained language models that concerns the primary topic, such that a primary proposed domain name is produced, where the primary proposed domain name concerns the primary topic and includes the seed domain name and at least one of a prefix or a suffix, and offering to register the primary proposed domain name.

Abstract: Systems and methods are disclosed for provide alternative domain names for a single Internet website to different users in results of search queries. The systems and methods can perform operations including maintaining alternative domain names for a single webpage of a content provider and associated context information of the alternative domain names. The operations also include receiving a request for the context information and providing the context information in response to the request. The operations further include receiving a notification of usage of an alternative domain name based on the context information. Additionally, the operations include determining usage metrics for the plurality of alternative domain names of the content provider based on the usage information. Moreover, the operations include periodically culling alternative domain names of the content provider based on the usage metrics.

Abstract: Various embodiments of the invention disclosed herein provide techniques for associating a firewall policy with a dynamic domain name system (DNS) hostname. A policy configuration portal transmits a first request to a names server to translate a first hostname into a corresponding network address. The policy configuration portal receives a first network address from the names server in response to the first request. The policy configuration portal determines that the first network address is different than a second network address that is currently associated with the first hostname. The policy configuration portal associates the first network address with the first hostname. The policy configuration portal modifies a firewall policy configuration associated with the first hostname to include the first network address. At least one advantage of the disclosed techniques is that a firewall policy can be implemented for a residential home or small business that employs dynamic IP addressing.