基于顶级域日志的DNS递归侧服务器测量与分析OA
Measurement and analysis of egress DNS resolvers based on top-level domain resolution log
域名系统(domain name system,DNS)在互联网通信中承担着将域名解析为计算机可识别的网际互连协议(Internet protocol,IP)地址的关键任务,是用户访问互联网资源的第一步.通过分析用户的DNS查询行为,网络管理人员能够洞察用户的网络使用模式、发现潜在的安全威胁以及优化网络资源配置.本文基于中国国家顶级域.CN的视角,系统地测量和分析了顶级域查询日志中超过40万个源IP地址的行为和查询特征,归纳出多个有价值的测量结果,包括查询行为的地理分布特征、递归服务器的自治域分布趋势等.最后,本文提出了一种基于域名特征向量对查询域名进行处理与分析的方法,对DNS查询内容进行了深入挖掘,从查询域名角度揭示了递归服务器的类型与功能特征,研究结果为DNS查询行为的深入理解和互联网资源的优化管理提供了有力支持.
Domain name system(DNS)undertakes the key task of resolving domain names into computer recognizable IP addresses in Internet communication,and is the first step for users to access Internet resources.By analyzing DNS query behavior of Internet users,network managers can discover features of network usage patterns,identify poten-tial security threats,and optimize network resource allocation.From the.CN top-level domain point of view,this paper systematically measures and analyzes the query behavior and features of over 400 000 IP addresses recorded in resolution log,and summarizes the geographic distribution of query behavior and the autonomous system distribu-tion trend of recursive servers.And a method to process and analyze the query domain name based on the domain name feature vector is proposed,which is used to mine DNS queries.The results reveal the type and functional fea-tures of recursive servers from the perspective of query domain name,and provide supports for understanding DNS query behavior and optimizing management of Internet resources.
何峥;张翠玲;武文浩;李帅良;张衡
中国互联网络信息中心 北京 100070中国互联网络信息中心 北京 100070中国科学院计算技术研究所 北京 100190中国互联网络信息中心 北京 100070中国互联网络信息中心 北京 100070
域名系统权威服务器递归服务器特征向量聚类
domain name system(DNS)authoritative DNS serverrecursive DNS serverfeature vectorclustering
《高技术通讯》 2026 (4)
374-386,13
国家重点研发计划(2022YFB3103000)资助项目.
评论