A dns dynamic scheduling method based on mimetic domain name server

Abstract

The present invention provides a kind of DNS dynamic scheduling method based on mimetic domain name server, comprising: step 1.1, initializing C cur ; Step 1.2, from C h Select k physical servers to form candidate set H k , from H k Select executive c in the sub-pool of executives to join C cur ; Step 1.3, if H k If there is no candidate physical server, go to step 1.5; otherwise go to step 1.4; step 1.4, from H k According to the preset security gain algorithm, determine the executor c’ that maximizes the system security gain in the executor sub-pool, and add C cur , execute step 1.6; step 1.5, traverse all other execution bodies in the execution body sub-pool where the current execution body is located, and determine the execution body c' that maximizes the system security gain among all the remaining execution bodies according to the preset security gain algorithm , join C cur ; Step 1.6, repeat step 1.3 until C cur The number of executive bodies reaches m. The invention selects the online execution body based on the security gain, so as to maximize the system security gain.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a DNS dynamic scheduling method based on a mimic domain name server. Background technique [0002] As one of the most important infrastructures of the Internet, the Domain Name System (DNS) maintains the mapping relationship between the domain name system and the IP address space. However, the domain name system inevitably has unknown vulnerabilities and backdoors, and is vulnerable to attacks. [0003] The domain name system is an information system, and the service model of the information system is an "input-processing-output" (IPO) model. Mimic defense is to introduce dynamics, heterogeneity and redundancy enhancement on the basis of this model. The system is used to defend against unknown vulnerabilities, backdoors and solve random failures. [0004] The mimic domain name system is a basic application of mimic defense. Such as figure 1 As shown, the mimic domain...

AI Technical Summary

Problems solved by technology

[0005] However, different scheduling strategies have different security gains. The current scheduling strategies are mainly based on random scheduling and scheduling based on the trust value of the executive. Degree, without quantifying the security of the system from a global perspective, so it is impossible to maximize the security gain of the mimic domain name system

Images