基于群组层次分析法的DNS安全状态多级评估  

Multistage evaluation for the health of DNS based on groupanalytic hierarchy process

作　　者：姜燕 李露 胡博 许元斌 杨超 董世丹傑 杨泽坡 李龙媚 Jiang Yan;Li Lu;Hu Bo;Xu Yuanbin;Yang Chao;Dong Shidanjie;Yang Zepo;Li Longmei(Beijing Fibrlink Communications Co.,Ltd.,Beijing 100071,China;State Grid Liaoning Electric Power Co.,Ltd.,Shenyang 110006,China;State Grid Information&Telecommunication Group Co.,Ltd.,Beijing 102209,China;State Grid Liaoning Electric Power Co.,Ltd.,Dalian Electric Power Co.,Ltd.,Dalian 116001,China)

机构地区：[1]北京中电飞华通信有限公司,北京100071 [2]国网辽宁省电力有限公司,辽宁沈阳110006 [3]国网信息通信产业集团有限公司,北京102209 [4]国网大连供电公司,辽宁大连116001

出　　处：《信息技术与网络安全》2021年第5期86-93,共8页Information Technology and Network Security

摘　　要：提出一种基于群组层次分析法的多级评估体系,全面考察当下主流的DNSSEC、恶意域名过滤等DNS安全策略以及系统容灾部署方式、配置界面容错性等指标对于DNS系统安全性的影响,具备监测项广泛的优点。基于群组层次分析法,设置各级指标的权重系数,得到量化的安全状态综合指标,有效评估以不同形式搭建的DNS系统的安全状态。以某电力公司DNS系统改造实例说明该方法的应用过程及评估结果,为DNS服务相关的改造项目提供可行性论证。A multistage evaluation method based on group analytic hierarchy process is proposed to determine the effectiveness of security policies such as DNSSEC,malicious domain name filtering,and the influence of system fault tolerance including disaster deployment and fault tolerant configuration,which investigates extensive indexes.Group analytic hierarchy process is used to determine the weights of every index and a scientific quantized indicator is worked out to evaluate the health of domain name system which could be built in different ways.The multistage evaluation method is proved to be rational with the example of DNS improvement for an electric power company and is valuable for the feasibility demonstration of DNS operation and maintenance projects.

关 键 词：DNS系统安全评估 群组层次分析法 系统容错性 DNS安全策略 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]