基于层次分析法的域名系统安全状况评估  

Measuring the Health of Domain Name System Based on Analytic Hierarchy Process

作　　者：尹凌晓[1,2] 延志伟[1] 毛伟[1] 

机构地区：[1]中国科学院计算机网络信息中心,北京100190 [2]中国科学院大学,北京100049

出　　处：《科研信息化技术与应用》2013年第2期75-79,共5页E-science Technology & Application

摘　　要：域名系统是互联网基础信息设施中的重要组成部分。但是,近年来利用域名系统的脆弱环节来进行攻击的事件层出不穷。因此,准确评估域名系统的运行情况和安全状况对互联网的安全保护工作至关重要。第二届关于DNS(Domain Name System)安全性、稳定性和弹性的讨论会报告已经指出了DNS健康的一些关键指标。在此基础上,MeNSa(Measuring the Naming System)项目又对这些指标进行了补充,并且提出了得到DNS健康指标的评估框架,但是他们没有给出通过监控项的值计算健康指标的可行权重设置算法。因此本文提出了使用AHP算法(Analytic Hierarchy Process)来设置健康指标的权重,通过实验验证发现该算法很好的试用于该应用,并且当监控项增加时算法仍有效,具有良好的扩展性。Domain Name System （DNS） is the fotmdation of modem cyber-world. Recently, the attacks that taken advantage of the weaknesses of DNS posed serious problems on DNS health and security. Measuring the health and security is significantly important. A first official discussion on indexes to measure DNS SSR is contained in the report of the 2nd Symposium on DNS SSR. The meeting proposed five key indexes to determine if the DNS is healthy. The MeNSa （Measuring the Naming System） project proposed a frameworkto quantify the key indexes of DNS health and security and defined of a set of health and security metrics. However, how to decide the weights of the metrics is an unsolved key issue for the DNS security evaluation. In this paper, we propose an AHP based scheme to calculate the weights and present the corresponding experimental results.

关 键 词：域名系统 域名安全 层次分析法 

分 类 号：F270[经济管理—企业管理]