A predictive intervention method for domain name recursive service

Abstract

The invention discloses a domain name recursion service pre-judgment and intervention method. The method includes the steps that firstly, domain names to be monitored are selected, and resource records of the domain names, to be monitored, in a recursion server are synchronized to a local system by a pre-judgment system; secondly, the resource record of each domain name is monitored; thirdly, if it is found that resource records of the set type of a domain name are changed, characteristic data of the domain name are acquired and are recognized by a classifier, and whether a change of the resource records of the set type is a dangerous change or not is judged; fourthly, if the dangerous change is a change of an authoritative server, an NS record and a Glue record are requested from an original authoritative server of the domain name and are written into a cache of the authoritative server; fifthly, if the authoritative server is not changed, the lifetime of original resource records, in the cache of the recursion server, of the domain name is prolonged; sixthly, if a negative abnormal change happens or the authoritative server is in a zone-unreachable state, the lifetime of a resource record set, in the cache of the recursion server, of the domain name is pronged. By means of the method, the safety of the recursion server and a user can be improved.

Description

technical field [0001] The invention relates to a pre-judgment intervention method for recursive domain name service, belonging to the technical field of computer networks. Background technique [0002] Domain Name System and its Security Status: [0003] As an important infrastructure of the Internet, the Domain Name System (DNS) has always provided key basic services for the operation of the global Internet. With the explosive growth of the Internet, various new technologies related to DNS have appeared one after another, such as IPv6, multilingual domain names and DNS Security Extension (DNSSEC), etc. The DNS system has also become more and more complex. Due to the lack of consideration of security and scalability at the beginning of the design, the domain name system has inherent deficiencies and fragility in the protocol, implementation and operation, which makes it face many security threats. Among them, some threats in data corruption (such as unauthorized change of...

AI Technical Summary

Problems solved by technology

[0010] In short, the caching mechanism of the recursive server makes it impossible to discover the abnormal state of the authoritative server in time

The lag in problem discovery affects the resolution quality and security of the recursive server itself, thereby reducing the accessibility of its resolution services and the Internet security of clients

Images