Unlock instant, AI-driven research and patent intelligence for your innovation.

DNS traffic abnormality detection method and device, electronic equipment and storage medium

A technology of abnormal traffic and detection method, applied in the computer field, to achieve the effect of fast detection speed, good stability, and timely detection

Inactive Publication Date: 2019-06-07
CHINA INTERNET NETWORK INFORMATION CENTER
View PDF6 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0006] The second attack method is abnormal request access attack
[0007] The third attack method is DNS hijacking attack
[0008] The fourth attack method is that the attacker uses DNS to attack

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • DNS traffic abnormality detection method and device, electronic equipment and storage medium
  • DNS traffic abnormality detection method and device, electronic equipment and storage medium
  • DNS traffic abnormality detection method and device, electronic equipment and storage medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0044] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

[0045] In order to discover the abnormality of DNS business in time, so that DNS service operation and maintenance personnel can adjust the external service of DNS server in time, thereby eliminating the influence of DNS abnormal traffic, the present invention provides a DNS traffic abnormal detection method, device, electronic equipment and storag...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a DNS flow abnormity detection method and device, electronic equipment and a storage medium. The method comprises: acquiring historical data and current data of DNS flow; Obtaining residual data according to the historical data and the current data of the DNS flow, the residual data comprising the residual data of the historical data and the residual data of the current data; And detecting whether the current DNS flow is abnormal according to the residual data of the historical data and the residual data of the current data. According to the DNS flow abnormality detection method provided by the invention, the abnormality of the DNS service can be found in time, so that DNS service operation and maintenance personnel can adjust the external service of the DNS server in time, thereby eliminating the influence of the abnormal flow of the DNS.

Description

technical field [0001] The present invention relates to the technical field of computers, in particular to a DNS traffic anomaly detection method, device, electronic equipment and storage medium. Background technique [0002] In computer network communication, hosts need to know the IP address of the communication peer to be able to communicate with each other through the IP network. However, the 32-bit IPv4 address (the IPv6 address is 128 bits) is not easy for the communication participants to remember. Therefore, more intuitive domain names (such as www.google.com.hk) are widely used to solve the problem of difficult memory of IP addresses. However, network communication is based on the IP protocol, and the host to be accessed cannot be directly found through the domain name. Therefore, the host needs to convert the domain name entered by the user into an IP address. This process is called domain name resolution. [0003] In order to complete domain name resolution, th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/12H04L29/06
Inventor 张恒张鹏孙才
Owner CHINA INTERNET NETWORK INFORMATION CENTER