Domain name system (DNS) dynamic scheduling method based on mimetic domain name server

Abstract

The invention provides a domain name system (DNS) dynamic scheduling method based on a mimetic domain name server. The method comprises the steps of S1.1, initializing Ccur; S1.2, selecting k physicalservers from Ch to form a candidate set Hk, selecting Hk from the Hk, and selecting an execution body c from an execution body sub-pool of the Hk for joining in the Ccur; S1.3, if no candidatephysical server exists in the Hk, executing the step 1.5; otherwise, executing the step 1.4; S1.4, selecting Hk<j> from the Hk, and determining an execution body c', which maximizes the system security gain, from an execution body sub-pool of the Hk<j> according to a preset security gain algorithm for joining in the Ccur; executing the step 1.6; S1.5, traversing all the rest execution bodies in the execution body sub-pool in which the current execution body is located, and determining the execution body c', which maximizes the system safety gain, from all the rest execution bodies according tothe preset security gain algorithm for joining in the Ccur; S1.6, repeatedly executing the step 1.3 until the number of the execution bodies of the Ccur reaches m. The method provided by the invention selects the online execution bodies based on security gain, thereby maximizing system security gain.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a DNS dynamic scheduling method based on a mimic domain name server. Background technique [0002] As one of the most important infrastructures of the Internet, the Domain Name System (DNS) maintains the mapping relationship between the domain name system and the IP address space. However, the domain name system inevitably has unknown vulnerabilities and backdoors, and is vulnerable to attacks. [0003] The domain name system is an information system, and the service model of the information system is an "input-processing-output" (IPO) model. Mimic defense is to introduce dynamics, heterogeneity and redundancy enhancement on the basis of this model. The system is used to defend against unknown vulnerabilities, backdoors and solve random failures. [0004] The mimic domain name system is a basic application of mimic defense. like figure 1 As shown, the mimic domain na...

AI Technical Summary

Problems solved by technology

[0005] However, different scheduling strategies have different security gains. The current scheduling strategies are mainly based on random scheduling and scheduling based on the trust value of the executive. Degree, without quantifying the security of the system from a global perspective, so it is impossible to maximize the security gain of the mimic domain name system

Images