DNS Evaluation Accuracy via Cluster Scoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current DNS evaluation methods are inaccurate due to reliance on single domain name assessments, lacking comprehensive analysis of feature dimensions and association relationships, which can lead to unreliable malignancy factor evaluations.
Innovation Solution
A method and apparatus that determine cluster scores for DNS systems by analyzing association relationships and feature dimension information across multiple domain names, using association identifier information such as IP addresses and identity information, to calculate a total system score, thereby enhancing evaluation accuracy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If DNS evaluation is based on a single domain name, then the evaluation process is simple, but the evaluation accuracy and credibility are insufficient
Solution Approach 1:
The patent segments the DNS evaluation process into multiple independent dimension analyses (malingancy dimension, popularity dimension, abnormality dimension), each evaluated separately using different feature sets and algorithms, then combines these segmented evaluations into a comprehensive assessment through weighted aggregation
Solution Approach 2:
The patent transitions from single-domain-name evaluation to multi-domain-name evaluation by introducing association relationships between domain names and identifier information (IP addresses, ports, protocols), adding new evaluation dimensions that capture the interconnected nature of DNS systems and improve measurement precision
2Measurement precision
If multiple domain names and feature dimensions are analyzed, then evaluation accuracy improves, but computational complexity increases
Solution Approach 1:
The patent divides the computational workload into separate modules for different evaluation dimensions (malingancy, popularity, abnormality), where each module processes specific feature sets independently, allowing for optimized resource allocation and parallel computation
Solution Approach 2:
The patent dynamically adjusts evaluation parameters including the number of domain names M included in the evaluation, the weighting coefficients for different dimensions, and the threshold values for malignancy assessment, enabling flexible control over computational complexity based on available resources and evaluation needs
Data Source
AI summary
A DNS evaluation method and apparatus. The method comprises: determining, according to a DNS traffic log, M domain names in a DNS system, and multiple pieces of feature dimension information about each category in pre-set categories corresponding to each of the M domain names, where M is an integer greater than or equal to 1; determining association identification information associated with each of the M domain names, wherein the association identification information comprises an IP address and/or identity information; determining, according to an association relationship between each of the M domain names and the association identification information, or attribute information about each of the M domain names, a cluster score for each category in the pre-set categories of the DNS system; and determining, according to the cluster score for each category in the pre-set categories of the DNS system, the total system score for the DNS system. Thus, the accuracy of DNS evaluation is improved.