DNS health degree assessment method based on fuzzy comprehensive evaluation model

Abstract

The invention discloses a DNS health degree assessment method based on a fuzzy comprehensive evaluation model. The DNS health degree assessment method comprises the following steps that step 1: server original traffic is acquired through the mode of switch mirroring, and all the data in a DNS response package are acquired; step 2: statistical analysis is performed through the DNS traffic according to a time window so as to form historical data, DNS health degree influence factors are extracted and the value of each influence factor is calculated; step 3: the influence generated by dimension difference between all the influence factors is eliminated so that the evaluation value of each DNS health degree influence factor is acquired; step 4: all the factors are classified according to the degree of influence so as to form a multilevel evaluation system, and the weight of each level of influence factor is analyzed and determined; and step 5: the current DNS security state is assessed according to the weight and the evaluation value of each influence factor so as to acquire the evaluation result of the current health state of the DNS. The characteristics of the current DNS traffic are fully considered so that multiple abnormal conditions of the DNS can be effectively detected.

Description

technical field [0001] The invention relates to the field of DNS system measurement and evaluation, in particular to a DNS health degree evaluation method based on a fuzzy comprehensive evaluation model. Background technique [0002] As the central nervous system of the Internet, DNS is a key node in almost all Internet applications. By measuring and evaluating the DNS, we can effectively deal with the problems and changes faced by the DNS, ensure the stability and security of the DNS system, and maintain the quality of DNS services. [0003] In the prior art, methods such as load monitoring of DNS, active performance testing, analysis of DNS traffic to detect attacks such as DDoS and DNS poisoning, and DNS data source and integrity authentication from the client are used to control the DNS server. For measurement and evaluation, the main method of active detection for performance measurement and evaluation still has the problem of large amount of calculation and long time ...

AI Technical Summary

Problems solved by technology

[0003] In the prior art, methods such as load monitoring of DNS, active performance testing, analysis of DNS traffic to detect attacks such as DDoS and DNS poisoning, and DNS data source and integrity authentication from the client are used to control the DNS server. For measurement and evaluation, the active detection method mainly used for performance measurement and evaluation still has the problem of large amount of calculation and time-consuming

Moreover, the aforementioned methods mainly focus on the measurement and evaluation of DNS performance and the measurement and evaluation of DNS security, and are limited to considering some specific performance or security issues of DNS servers, and less consideration is given to the usage of users in the DNS service area. Difficulty assessing DNS health as a whole

Images