IP recognition method and system for domain name authority service source

Abstract

The invention discloses an IP recognition method and system for a domain name authority service source. The method comprises the steps: 1), a query record feature statistic module extracts the query record features of set source IPs from an authority query log of an authority server; 2), a recursion structure feature statistic module builds a recursion structure mapping relation table according to the read global recursion service detection data, and then carries out recursion structure feature extraction according to the recursion structure mapping relation table; 3), a source IP cluster recognition module carries out the clustering of the set source IPs according to the extracted query record features and the recursion structure features, dividing the source IPs into a plurality of different subsets, and sets a response strategy for each subset; 4), the authority judges which subset the IP corresponding to the query belongs to when the authority server receives the query, and then carries out the processing of the IP corresponding to the query according to the response strategy corresponding to the subset. The method can achieve the fine recognition of different types of source IPs, and carries out the corresponding processing of the IPs.

Description

technical field [0001] The invention relates to a domain name authoritative service source IP identification method and system, belonging to the technical field of computer networks. Background technique [0002] As a key link of DNS service, domain name authoritative service is responsible for providing RR records mapping between domain names and IP addresses, which is the basis for the normal operation of most Internet services. The efficient operation of domain name authority is a key factor to ensure the stable operation of domain name services and even basic Internet services. [0003] There may be multiple types of domain name authoritative service source IP. For example, from operator recursive servers, Internet open recursive servers, search engine services, e-mail services, cloud services, network detection services, and so on. When the authoritative server suffers from a denial of service attack, indiscriminate verification against the source IP may cause misjudg...

AI Technical Summary

Problems solved by technology

Since the top-level domain name authoritative service objects include multiple types and different characteristics, neither of the above two source IP identification technologies can achieve fine classification of authoritative service source IP

Images