Unlock instant, AI-driven research and patent intelligence for your innovation.

A network evaluation method and device based on dns behavior characteristics

An evaluation method and network technology, applied in the Internet field, can solve the problem of low credibility

Inactive Publication Date: 2020-09-25
中国移动通信集团海南有限公司
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The technical problem to be solved by the present invention is to provide a network evaluation method and system based on DNS behavior characteristics, which aims to solve the problem of low credibility in the prior art that only targets a single domain name and a single-dimensional evaluation algorithm

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A network evaluation method and device based on dns behavior characteristics
  • A network evaluation method and device based on dns behavior characteristics
  • A network evaluation method and device based on dns behavior characteristics

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0057] In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

[0058] figure 1 It shows a network evaluation method based on DNS behavior characteristics provided by an embodiment of the present invention, including:

[0059] S101, receiving the DNS log of the domain name resolution system to be evaluated;

[0060] S102. Extract a first set including several sets of correspondences between request domain names and server IPs and a second set including several sets of correspondences between client IPs and request domain names from the DNS log.

[0061] In this step, the network evaluation device groups the information extracted from the DNS log, specifically...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present invention is applicable to the field of network evaluation, and provides a network evaluation method based on DNS behavior characteristics, including: receiving the DNS log of the domain name resolution system to be evaluated; extracting the first set and the second set from the DNS log; Each group correspondence in the two sets is scored in multiple dimensions to obtain the first scoring set and the second scoring set; for each dimension, the maximum score is extracted from the first scoring set and the second scoring set as the first and second scoring sets. The second system dimension scoring set; performing comprehensive scoring according to the first system dimension scoring set and the second system dimension scoring set, and performing network evaluation on the DNS log with the obtained comprehensive score. The embodiment of the present invention scores the DNS system from multiple dimensions, such as maliciousness, popularity, and abnormality, and evaluates the DNS system from multiple feature dimensions in groups, effectively improving the credibility of the DNS system evaluation degree and accuracy.

Description

technical field [0001] The invention belongs to the technical field of the Internet, and in particular relates to a network evaluation method and system based on DNS behavior characteristics. Background technique [0002] Domain Name Service (DNS for short) is a distributed database on the Internet that maps domain names and IP addresses to each other. Malicious DNS is highly harmful and will cause property loss to users, and may even lead to website or network paralysis in severe cases. Therefore, the security of the DNS system itself is extremely important. [0003] Currently, the commonly used DNS system scoring technology is to evaluate the maliciousness of a single domain name from the number of visits from the client. The existing technology only evaluates the DNS system based on one dimension of a single domain name, and evaluates the DNS system from one evaluation direction of maliciousness, resulting in the evaluation of less reliable. Contents of the invention ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L29/12
CPCH04L63/1425H04L61/4511
Inventor 王瑶李映壮何瑞强
Owner 中国移动通信集团海南有限公司