论文部分内容阅读
域名系统是互联网基础信息设施中的重要组成部分。但是,近年来利用域名系统的脆弱环节来进行攻击的事件层出不穷。因此,准确评估域名系统的运行情况和安全状况对互联网的安全保护工作至关重要。第二届关于DNS(Domain Name System)安全性、稳定性和弹性的讨论会报告已经指出了DNS健康的一些关键指标。在此基础上,MeNSa(Measuring the Naming System)项目又对这些指标进行了补充,并且提出了得到DNS健康指标的评估框架,但是他们没有给出通过监控项的值计算健康指标的可行权重设置算法。因此本文提出了使用AHP算法(Analytic Hierarchy Process)来设置健康指标的权重,通过实验验证发现该算法很好的试用于该应用,并且当监控项增加时算法仍有效,具有良好的扩展性。
Domain Name System is an important part of Internet infrastructure. However, in recent years there has been an endless stream of attacks using vulnerabilities in the domain name system. Therefore, an accurate assessment of the operation and security status of the DNS is crucial to the security of the Internet. The second symposium’s report on the security, stability and resiliency of DNS (Domain Name System) pointed out some key indicators of DNS health. On this basis, the Means (Measuring the Naming System) project supplemented these indicators and proposed an evaluation framework for obtaining DNS health indicators, but they did not give a feasible weighting algorithm for calculating health indicators by monitoring the values of the terms . Therefore, this paper proposes the use of the AHP algorithm (Analytic Hierarchy Process) to set the weight of health indicators, the experimental verification shows that the algorithm is a good test for the application, and when the monitoring items increase the algorithm is still valid, with good scalability.