Method for minimizing the risk and exposure duration of improper or hijacked dns records

Abstract

Provided is a method for assigning a time-to-live (“TTL”) value for a domain name system (“DNS”) record at a recursive DNS server. The method comprises obtaining, from a client, the TTL value for the DNS record; and storing, in a memory of the recursive DNS server, the TLL value, an identifier of the client, and the DNS record.

What is claimed is: 
     
         1 . A method for assigning a time-to-live (“TTL”) value for a domain name system (“DNS”) record, the method comprising:
 receiving a policy associated with a given DNS parameter, wherein the policy specifies a maximum TTL value for one or more DNS records that satisfy the given DNS parameter; 
 transmitting a first DNS request associated with a first domain name to an authoritative name server; 
 receiving, from the authoritative name server and in response to the first DNS request, (i) a first DNS record associated with the first domain name and (ii) a TTL value corresponding to the first DNS record; 
 determining that the policy applies to the first DNS request; 
 determining that the TTL value is greater than the maximum TTL value specified by the policy; and 
 storing, in a memory, an association between the maximum TTL value and the first DNS record based on the policy.