基于域名系统属性的速变服务网络检测方法  

Fast-Flux Detection Method Based on Domain Name System Attribute

作　　者：王佳佳[1] 叶钰[1] 李世杰 刘惠光 王一帆 WANG Jia-jia;YE Yu;LI Shi-jie;LIU Hui-guang;WANG Yi-fan(School of Information Technology, Taizhou Polytechnic College, Taizhou 225300, China)

机构地区：[1]泰州职业技术学院信息技术学院

出　　处：《南通职业大学学报》2019年第3期77-82,共6页Journal of Nantong Vocational University

基　　金：泰州职业技术学院博硕基金项目(TZYBS-17-6);泰州职业技术学院大学生创新创业训练项目(YJDC2018017)

摘　　要：基于对速变服务网络(Fast-flux service network,FFSN)的工作原理、申请流程、相关特征等分析,设计FFSN的检测流程,并提出了一种区分速变服务网络与合法网络的方法:详细分析两者相关域名系统属性的差异,构建检测特征,使用决策树算法检测速变服务网络的存在。实验证明,该方法可有效识别FFSN,具有较高的检测率。The fast-flux service network (FFSN) testing process is designed based on the analysis of its working principle, application process and related characteristics. A method for distinguishing rapid change service network and legal network is put forward and the system attributes differences of the related domain name system are analyzed with details. The testing characteristics are constructed and the existence of rapid change service network is tested by decision tree algorithm. The experimental results show that this method can effectively identify FFSN and has a high detection rate.

关 键 词：速变服务网络(FFSN) 域名系统 决策树算法 网络检测 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]