Autonomous domain specific attribution analysis and database construction method, equipment and medium

Abstract

The embodiment of the invention discloses an autonomous domain specific attribution analysis and database construction method, equipment and a medium. The analysis method comprises the following steps: acquiring a plurality of ASNs of a target region, countries to which the ASNs belong, whois information and at least one IXP; performing the following operations on each ASN: matching whois information of the ASN with administrative region information of a country to which the ASN belongs; if the matching is successful, determining the province and city to which the ASN belongs according to the matched administrative region; if the matching is unsuccessful, the whois information of the ASN is matched with the postal code information of the country; if the matching is successful, determining the province and city to which the ASN belongs according to the matched postal code; and if the postal codes are not successfully matched, provinces and cities where the IXPs of the ASN are located are determined, and the provinces and cities with the most IXPs are determined as the provinces and cities to which the ASN belongs. According to the embodiment of the invention, the attribution of the ASN can be analyzed to the province and city level.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of network security technology, and in particular to a method, device and medium for analyzing and building a database of a specific location in an autonomous domain. Background Art

[0002] Autonomous System (AS) is one of the key elements of the Internet routing architecture. In the network, Autonomous System Number (ASN) is a unique numerical identifier used to identify an autonomous domain. It is of great significance for identifying network structure and tracking network activities.

[0003] For different countries or regions around the world, a large number of ASNs means that a country or region has more network service providers, large enterprises, academic institutions, etc. Therefore, the number of ASNs can be used as an indicator to measure the scale and development level of the region's network. At the same time, the number of ASNs also reflects the degree of interconnection between the networks in the region. More ASNs mean more network nodes and more complex network structures, which helps promote the circulation and sharing of information.

[0004] Therefore, it is very important to analyze the specific location of each ASN in a certain region or even globally, which can help understand the overall network strength of each region, and can clearly identify the areas that should be protected and the areas that are prone to attack, thereby improving the security protection capabilities of each region. However, there is currently no method that can analyze the location of ASNs to the provincial and / or municipal level. Summary of the invention

[0005] The embodiments of the present invention provide a method, device and medium for autonomous domain specific location resolution and database construction to solve the above technical problems.

[0006] In a first aspect, an embodiment of the present invention provides a method for resolving a specific location of an autonomous domain, including:

[0007] Acquire ASN data of a target area, wherein the target area includes at least one province or city, and the ASN data includes a plurality of ASNs, the country to which each ASN belongs, whois information, and at least one IXP;

[0008] Perform the following operations for each ASN:

[0009] S1. Match the whois information of the ASN with the administrative region information of the country to which the ASN belongs; if the match is successful, determine the province or city to which the ASN belongs according to the matched administrative region;

[0010] S2. If the match fails, match the whois information of the ASN with the postal code information of the country; if the match succeeds, determine the province or city to which the ASN belongs based on the matched postal code;

[0011] S3. If the postal code matching fails, determine the province or city where each IXP of the ASN is located, and determine the province or city with the most IXPs as the province or city to which the ASN belongs.

[0012] In a second aspect, an embodiment of the present invention provides a method for constructing a specific location database of an autonomous domain, including:

[0013] The method described in the previous embodiment is used to parse the province and city to which each ASN in the target area belongs, and the parsing results together constitute a specific location database of the autonomous domain;

[0014] The latest whois information and IXP information are obtained regularly, and the method described in the previous embodiment is re-executed according to the latest whois information and IXP information to update the database.

[0015] In a third aspect, an embodiment of the present invention further provides an electronic device, the electronic device comprising:

[0016] one or more processors;

[0017] a memory for storing one or more programs,

[0018] When the one or more programs are executed by the one or more processors, the one or more processors implement the autonomous domain specific location resolution method or the autonomous domain specific location database construction method described in any embodiment.

[0019] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method for parsing a specific location of an autonomous domain or the method for constructing a database of a specific location of an autonomous domain as described in any embodiment.

[0020] In summary, the embodiments of the present invention provide a method for parsing the specific location of an autonomous domain and a method for constructing a database of the specific location of an autonomous domain, which matches the information of the ASN with the administrative region, postal code, and IXP location of the country to which the ASN belongs step by step to determine the province and city information of the ASN other than the country. This step-by-step matching method of first matching the province and city, then matching the postal code, and then matching the IXP not only ensures the efficiency of the resolution, but also makes up for the incompleteness of whois information and the incompleteness of the comparison information, fully ensuring the success rate of the resolution. The results of the resolution can be stored as a database and updated regularly, which helps to understand the latest overall network complexity and network strength of the region, and assists in clarifying the areas that should be protected and the areas that are easy to attack, thereby improving the security protection of various regions. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0022] Figure 1 It is a flow chart of a method for resolving a specific location in an autonomous domain provided by an embodiment of the present invention;

[0023] Figure 2 It is a schematic diagram of whois information of an ASN provided by an embodiment of the present invention;

[0024] Figure 3 It is a schematic diagram of filtered whois information provided by an embodiment of the present invention;

[0025] Figure 4 This is a schematic diagram of a file format of first-level administrative regions of crawled global countries provided by an embodiment of the present invention;

[0026] Figure 5 This is a schematic diagram of a file format of crawled secondary administrative regions of global countries provided by an embodiment of the present invention;

[0027] Figure 6 This is a schematic diagram of the correspondence between provinces and countries after parsing provided by an embodiment of the present invention;

[0028] Figure 7 This is a schematic diagram of the correspondence between cities and provinces after parsing provided by an embodiment of the present invention;

[0029] Figure 8is a schematic diagram of a crawled postal code source file provided by an embodiment of the present invention;

[0030] Fig. 9 is a schematic diagram of a parsed postal code file provided by an embodiment of the present invention;

[0031] Fig.10 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0032] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be described clearly and completely below. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work belong to the scope of protection of the present invention.

[0033] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance.

[0034] In the description of the present invention, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0035] The embodiment of the present invention provides a method for parsing the specific location of an autonomous domain, the purpose of which is to parse out the specific location of an ASN, and the main data source is the whois information of the ASN. In order to illustrate the method, the basic rules of whois information are first explained. In this embodiment, the whois information of the global ASN is crawled on the website, and the whois information is analyzed. It is found that there is a large amount of information that is not related to the location, and there is also some information related to the location, such as postal code, street, city and other information. However, the whois information obtained by different ASNs is not the same. In summary: ASNs can obtain national information; the information of provinces / states and cities may exist in the whois information, or one, all, or none; postal codes, streets and other information exist in the whois information of some ASNs, but not in the whois information of some ASNs.

[0036] Based on the above rules, Figure 1 1 is a flowchart of a method for resolving a specific location in an autonomous domain provided by an embodiment of the present invention. The method is executed by an electronic device. Figure 1 As shown, the method specifically includes:

[0037] S110, obtaining ASN data of a target area, wherein the target area includes at least one province or city, and the ASN data includes multiple ASNs, the country to which each ASN belongs, whois information, and at least one IXP.

[0038] The target area refers to the area to be handled by this implementation. The target area can be large or small, ranging from a province or city to the global scope. The province and city here means province and / or city, and it can be applicable to the case where only province, only city, or both province and city are included. The entire method will be explained later using the case where the target area is the global scope and the province and city include province and city as an example.

[0039] This step first obtains ASN data worldwide as the data source of the entire method. Optionally, ASN data can be obtained by crawling the website. First, select the website to be crawled (including but not limited to ipip.net), and then parse the html according to the page format of the website to obtain the ASN number (hereinafter referred to as ASN), country information, Internet eXchange Points (IXP) and the corresponding attributes of whois information. Then, the whois information of each ASN is filtered to remove information that is not related to the ASN's location. For example, the relevant information in the whois information can be analyzed, and regular expressions can be written to filter out irrelevant information. After filtering, the ASN number, country information, IXP and filtered whois information parsed according to the attributes in the html are stored in the database.

[0040] Figure 2 Taking ASN number AS30844 as an example, the whois information of ASN is displayed. The fields such as import and export are useless information that is irrelevant to the ASN's location and are very long. Therefore, this information is filtered out through regular expressions. The filtered information is as follows Figure 3 As shown, the information related to the place of origin may be in the address, which may include information such as province or state, city, town or postal code.

[0041] S120: Obtain the reference information required for the location resolution, including administrative region information at all levels of each country, postal code information, and the geographic location database of each IXP.

[0042] As mentioned above, since the whois information contains information such as cities, towns, provinces or states or postal codes, this embodiment pre-constructs the administrative region information and postal code information of each country at all levels for comparison with the information in the whois information. Optionally, the first-level and second-level administrative region information and postal code information of countries around the world can be obtained from relevant websites through crawlers; the crawled information is in txt format, and each adjacent attribute value is separated by \t, so the file is read and the string is divided by \t to get different attribute values; finally, the country is corresponding to the province, the province is corresponding to the city, and the postal code information is stored in the database in a one-to-one correspondence.

[0043] Figure 4 The file format of the first-level administrative regions of the crawled countries around the world is shown as an example, where the first column is the country's ISO code, GB corresponds to the United Kingdom; the number after the "." is the province number, and the subsequent sequences are name, ascii name, and id. Figure 5 The file format of the crawled second-level administrative regions of the global countries is shown as an example. The first column is the ISO code of the country, the number after the first "." is the number of the province, the number after the second "." is the city number, and the sequence after that is the name, ascii name, and id. Combining the above two files with the global countries, two files can be parsed, namely: the one-to-one correspondence between provinces and countries, such as Figure 6 As shown in the figure, there is a one-to-one correspondence between cities and provinces, such as Figure 7 shown.

[0044] Figure 8The crawled zip code source file is shown as an example, where the first column is the country ISO code, the second column is the zip code, the third column is the place name corresponding to the zip code (maybe a village, town, etc.), the fourth and fifth columns are the first-level administrative region code and name, the sixth and seventh columns are the second-level administrative region code and name, the eighth and ninth columns are the third-level administrative region code and name, and the tenth and eleventh columns are the latitude and longitude. The parsing results are as follows Fig. 9 shown.

[0045] In addition to whois information, network service providers can directly exchange data with other autonomous domains connected to the same IXP by connecting to the IXP, and the ASN is used to determine the path for data transmission from one autonomous domain to another, so the location of the IXP is the center of the ASN. Therefore, this embodiment introduces IXP to perform ASN attribution resolution. Since the IXP is an IP address, a corresponding geographic location library is required for matching, so this embodiment pre-acquires the geographic location library of each IXP (including but not limited to IP2LOCATION, Evan, etc.). Taking the IXP with IP address 195.66.224.68 as an example, the following information can be queried from the geographic location library:

[0046] ISP:London Internet Exchange Ltd.

[0047] Services:Datacenter

[0048] Country:UnitedKingdom ofGreat Britain andNorthern Ireland

[0049] State / Region:England

[0050] City:London

[0051] S130. Using the above comparison information, the ASNs are matched by province, city, postal code, and IXP in descending order of importance.

[0052] The above three matches can all get the province and / or city to which the ASN belongs. Among them, if the province and city are matched successfully, the final result can be directly obtained, so the matching of the province and city is ranked first. Since an ASN only corresponds to a unique postal code, the postal code is enough to uniquely determine the province and city to which the ASN belongs, so the postal code matching is ranked second. An ASN may have multiple IXPs, so the operation of determining the province and city to which the ASN belongs through IXP is relatively cumbersome, so the matching of IXP is ranked last. The above ranking is the ranking of the importance of the three matching methods.

[0053] Based on the above, the specific matching process of each ASN may include the following steps:

[0054] S0. Information filtering: First, according to the country to which the ASN belongs, the collected administrative region information and postal code information at all levels are filtered, and only the administrative region information and postal code information of the current country are retained.

[0055] S1. Match the whois information of the ASN with the filtered administrative area information; if the match is successful, determine the province or city to which the ASN belongs based on the matched administrative area. Specifically, if the ASN location parsed from the whois information is a certain administrative area or its subordinate area after filtering, it is considered that the match is successful, and the province or city to which the ASN belongs can be determined based on the certain administrative area. Optionally, the ASN location parsed from the whois information can be at least one of a province, a city, and a township. If the province in the whois information is consistent with a province in the filtered administrative area information, then the province is the province described in the ASN; if the city in the whois information is consistent with a city in the filtered administrative area information, then the city is the city to which the ASN belongs, and the second province to which the city belongs is the province to which it belongs. There is also a special case, that is, the whois information only includes township information. At this time, the pre-constructed administrative region information at all levels needs to include the three-level administrative regions of each country; accordingly, if the township information is consistent with a township in the filtered administrative region, the province and city to which the township belongs are the province and city to which the ASN belongs.

[0056] In another specific implementation, since there are differences in the formats of the whois information for the same related city or province, etc., the original names of the filtered administrative regions can be converted into multiple formats before matching, such as zhejiang, converted into zhe-jiang, Zhejiang, zhe jiang, etc. After the conversion, the whois information of the ASN is matched with the original names of the administrative regions and the names in various formats. If the ASN location parsed in the whois information is consistent with any name of a certain administrative region after filtering, or is consistent with any name of a subordinate region of the certain administrative region, it is considered that the match is successful, and the original name of the certain administrative region is fed back as the matching administrative region. This can improve the matching rate and reduce the subsequent consistency verification workload.

[0057] S2. If the match fails, match the whois information of the ASN with the postal code information of the country; if the match succeeds, determine the province or city to which the ASN belongs based on the matched postal code.

[0058] If the province and city match is unsuccessful, this step will perform postal code matching. The result of the postal code matching may be a city or a province. Therefore, after the postal code matching is completed, the province and city data need to be matched. If there is a matching result in the province and city list, the result will be returned.

[0059] Specifically, if a certain filtered postal code is parsed in the whois information, it is considered that the match is successful, and the province or city to which the ASN belongs is determined based on the certain postal code.

[0060] S3. If the postal code matching fails, determine the province or city where each IXP of the ASN is located, and take the province or city with the most IXPs as the province or city to which the ASN belongs.

[0061] Specifically, the geographical location of each IXP of the ASN is mapped according to the geographical location database; the province and city where each IXP is located can be determined according to the mapped geographical locations. Usually, each IXP of an ASN belongs to the same province and city, but in a few cases, they belong to multiple provinces or cities. In this case, the city with the most IXPs in the ASN can be selected as the city to which the ASN belongs, and the province where the city is located is the province to which the ASN belongs.

[0062] S140: Perform consistency check on the province or city to which each ASN belongs.

[0063] Since the province, city, postal code and geographic location database are not from the same website, they all have their own name standards. Therefore, the matching results need to be checked for consistency. The consistency check is to standardize the names of the same province or city in different formats. In the entire database, there is only one form of expression for a province and one form of expression for a city. The verified data is mapped in the form of a dictionary, and can be automatically checked later.

[0064] It is worth mentioning that the multi-level matching method of province and city matching, postal code matching, and IXP matching is adopted in this embodiment not only because the whois information of the ASN may not include the province and city information, but also because the comparison information collected in S120 may be incomplete, such as incomplete administrative area information, incomplete postal code information, or incomplete IXP geographical location information. Such incompleteness may also lead to matching failure, and even if the whois information includes the province and city information, the matching cannot be successful. Therefore, the multi-level matching method of this embodiment can make up for the incompleteness of whois information and the incompleteness of comparison information, and fully ensure the success rate of resolution.

[0065] Figure 2 A method for constructing a specific location database for an autonomous domain is provided in an embodiment of the present invention.

[0066] like Figure 2 As shown, the method specifically includes:

[0067] S210. Use the analysis method described in any of the above embodiments to analyze the province or city to which each ASN in the target area belongs, and the analysis results together constitute a specific location database for the autonomous domain.

[0068] S230, regularly obtaining the latest whois information and IXP information, and re-executing any of the above-mentioned parsing methods according to the latest whois information and IXP information to update the database.

[0069] This embodiment takes into account the timeliness of whois information and ixp information, and therefore updates the database regularly, for example, once a month, to ensure the accuracy and timeliness of the specific location of the ASN.

[0070] In summary, this embodiment provides a method for parsing a specific location of an autonomous domain and a method for constructing a database of a specific location of an autonomous domain. Based on the whois information and IXP information of the ASN, the comparison information of the postal code, province and city data related to the ASN location is collected and parsed, and then the ASN information is matched step by step with the province, city, postal code, and IXP location in the comparison information to determine the province and city information of the ASN other than the country. This step-by-step matching method of first matching the province and city, then matching the postal code, and then matching the IXP not only ensures the parsing efficiency, but also makes up for the incompleteness of the whois information and the incompleteness of the comparison information, and fully ensures the parsing success rate. The parsed results can be stored as a database and updated regularly, which helps to understand the latest overall network complexity and network strength of the region, and assists in clarifying the areas that should be protected and the areas that are easy to attack, thereby improving the security protection of various regions.

[0071] Fig.10 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention is shown in FIG. Fig.10 As shown, the device includes a processor 60, a memory 61, an input device 62 and an output device 63; the number of processors 60 in the device can be one or more. Fig.10 A processor 60 is taken as an example; the processor 60, the memory 61, the input device 62 and the output device 63 in the device can be connected by a bus or other means. Fig.10 The example of connecting through bus is taken in the following.

[0072] The memory 61, as a computer-readable storage medium, can be used to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to the autonomous domain specific location resolution method in the embodiment of the present invention. The processor 60 executes various functional applications and data processing of the device by running the software programs, instructions and modules stored in the memory 61, that is, implementing the above-mentioned autonomous domain specific location resolution method.

[0073] The memory 61 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created according to the use of the terminal, etc. In addition, the memory 61 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 61 may further include a memory remotely arranged relative to the processor 60, and these remote memories may be connected to the device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0074] The input device 62 may be used to receive input digital or character information and generate key signal input related to user settings and function control of the device. The output device 63 may include a display device such as a display screen.

[0075] An embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the autonomous domain specific location resolution method of any embodiment.

[0076] The computer storage medium of the embodiment of the present invention can adopt any combination of one or more computer-readable media. The computer-readable medium can be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium can be, for example, but not limited to, a system, device or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this document, a computer-readable storage medium can be any tangible medium containing or storing a program, which can be used by an instruction execution system, a device or a device or used in combination with it.

[0077] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, which carry computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0078] The program code embodied on the computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0079] Computer program code for performing the operations of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as C or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0080] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the technical solutions of the embodiments of the present invention.

Claims

1. A method for resolving a specific location in an autonomous domain, characterized in that: include: Acquire ASN data of a target area, wherein the target area includes at least one province or city, and the ASN data includes a plurality of ASNs, the country to which each ASN belongs, whois information, and at least one IXP; Perform the following operations for each ASN: S1. Match the whois information of the ASN with the administrative region information of the country to which the ASN belongs; if the match is successful, determine the province or city to which the ASN belongs according to the matched administrative region; S2. If the match fails, match the whois information of the ASN with the postal code information of the country; if the match succeeds, determine the province or city to which the ASN belongs based on the matched postal code; S3. If the postal code matching fails, determine the province or city where each IXP of the ASN is located, and determine the province or city with the most IXPs as the province or city to which the ASN belongs.

2. The method according to claim 1, characterized in that The obtaining of ASN data of the target area includes: Get ASN data of the target area by crawling the website; The whois information of each ASN in the ASN data is filtered to remove information irrelevant to the ASN's location.

3. The method according to claim 1, characterized in that Prior to S1, it also included: collecting administrative region information at all levels in each country through website crawling; Correspondingly, S1 includes: filtering the collected administrative region information at all levels according to the country to which the ASN belongs; matching the whois information of the ASN with the filtered administrative region information, if the ASN belonging to the whois information parsed is a certain administrative region or its subordinate region after the filter, it is considered that the match is successful; based on the successfully matched administrative region, determining the province or city to which the ASN belongs.

4. The method according to claim 3, characterized in that Matching the whois information of the ASN with the filtered administrative area information, including: converting the filtered original names of the administrative areas into multiple formats; matching the whois information of the ASN with the original names of the administrative areas and the names in various formats; Correspondingly, if the ASN location parsed in the whois information is a certain administrative region after filtering or its subordinate region, the match is considered successful, including: if the ASN location parsed from the whois information is consistent with any name of a certain administrative region after filtering, or is consistent with any name of a subordinate region of the certain administrative region, the match is considered successful, and the original name of the certain administrative region is fed back as the matching administrative region.

5. The method according to claim 1, characterized in that Prior to S2, it also included: collecting zip code information for each country through website crawling; Correspondingly, S2 includes: filtering the collected postal code information according to the country to which the ASN belongs; matching the whois information of the ASN with the filtered postal code information, if a certain filtered postal code is parsed from the whois information, it is considered that the match is successful, and determining the province and city to which the ASN belongs based on the certain postal code.

6. The method according to claim 1, characterized in that Prior to S3, this also included: collecting the geographic location database of each IXP through website crawling; Correspondingly, determining the province or city where each IXP of the ASN is located includes: mapping the geographical location of each IXP of the ASN according to the collected geographical location database; and determining the province or city where each IXP is located according to the mapped geographical locations.

7. The method according to claim 1, characterized in that Also includes: After executing the operation values ​​of S1-S3 for each ASN respectively, it also includes: The names of the provinces and cities to which each ASN belongs are checked for consistency in order to unify the names of the same province and city.

8. A method for constructing a specific location database of an autonomous domain, characterized in that: include: Using the method described in any one of claims 1 to 7, the province or city to which each ASN in the target area belongs is analyzed, and the analysis results together form a specific location database of the autonomous domain; Regularly obtain the latest whois information and IXP information, and re-execute the method according to any one of claims 1 to 7 according to the latest whois information and IXP information to update the database.

9. An electronic device, characterized in that: include: one or more processors; a memory for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the autonomous domain specific location resolution method described in any one of claims 1-7, or the autonomous domain specific location database construction method described in claim 8.

10. A computer-readable storage medium, characterized in that: A computer program is stored thereon, which, when executed by a processor, implements the method for parsing the specific location of an autonomous domain as described in any one of claims 1 to 7, or the method for constructing a database of the specific location of an autonomous domain as described in claim 8.

Images