随着5G时代的到来,网络中的用户数量及其访问行为所产生的流量呈爆发式增长。作为互联网基石,域名系统(domain name system,DNS)变得愈加重要,其不仅能够存储海量访问行迹,还能传递活动背后的行为信息。运用大数据技术挖掘DNS的数据信息...随着5G时代的到来,网络中的用户数量及其访问行为所产生的流量呈爆发式增长。作为互联网基石,域名系统(domain name system,DNS)变得愈加重要,其不仅能够存储海量访问行迹,还能传递活动背后的行为信息。运用大数据技术挖掘DNS的数据信息,并对其进行分析处理,从中描述用户的行为逻辑,不仅能为判断未来的流量趋势、促进网络基础建设提供数据支持,还能为信息网络中的通信运营商、互联网企业等提供帮助,促进互联网信息技术的发展。展开更多
With the widespread adoption of encrypted Domain Name System(DNS)technologies such as DNS over Hyper Text Transfer Protocol Secure(HTTPS),traditional port and protocol-based traffic analysis methods have become ineffe...With the widespread adoption of encrypted Domain Name System(DNS)technologies such as DNS over Hyper Text Transfer Protocol Secure(HTTPS),traditional port and protocol-based traffic analysis methods have become ineffective.Although encrypted DNS enhances user privacy protection,it also provides concealed communication channels for malicious software,compelling detection technologies to shift towards statistical featurebased and machine learning approaches.However,these methods still face challenges in real-time performance and privacy protection.This paper proposes a real-time identification technology for encrypted DNS traffic with privacy protection.Firstly,a hierarchical architecture of cloud-edge-end collaboration is designed,incorporating task offloading strategies to balance privacy protection and identification efficiency.Secondly,a privacy-preserving federated learning mechanismbased on Federated Robust Aggregation(FedRA)is proposed,utilizingMedoid aggregation and differential privacy techniques to ensure data privacy and enhance identification accuracy.Finally,an edge offloading strategy based on a dynamic priority scheduling algorithm(DPSA)is designed to alleviate terminal burden and reduce latency.Simulation results demonstrate that the proposed technology significantly improves the accuracy and realtime performance of encrypted DNS traffic identification while protecting privacy,making it suitable for various network environments.展开更多
域名系统(Domain Name System,DNS)是互联网中用于将域名解析为IP地址的重要服务,DNS覆盖了绝大多数网络活动场景。关键信息基础设施涉及国家安全和社会稳定,其网络服务的正常运行依赖于DNS解析的完整性。DNS攻击不仅会导致服务中断,还...域名系统(Domain Name System,DNS)是互联网中用于将域名解析为IP地址的重要服务,DNS覆盖了绝大多数网络活动场景。关键信息基础设施涉及国家安全和社会稳定,其网络服务的正常运行依赖于DNS解析的完整性。DNS攻击不仅会导致服务中断,还可能窃取敏感信息,严重威胁关键信息基础设施的安全。因此,研究关键信息基础设施面临的DNS攻击威胁及其防范措施十分必要。文章梳理了DNS攻击的类型及其危害,深入分析了DNS攻击对关键信息基础设施的威胁,并提出了技术与管理协同的纵深防御体系,以期为保障关键信息基础设施的安全稳定运行提供参考。展开更多
域名解析系统(Domain Name System,DNS)是互联网的核心组成部分,负责将域名转化为对应的IP地址。根、顶级域等权威服务器和本地域名服务器(Local DNS,LDNS)共同组成了DNS服务系统,其稳定运行直接关系到全球网络服务的可用性与安全性。基...域名解析系统(Domain Name System,DNS)是互联网的核心组成部分,负责将域名转化为对应的IP地址。根、顶级域等权威服务器和本地域名服务器(Local DNS,LDNS)共同组成了DNS服务系统,其稳定运行直接关系到全球网络服务的可用性与安全性。基于20多年的运维经验,笔者提出构建新型域名解析运营体系,理顺域名所有者、运营者和秩序管理者的责权利关系,以期更好地支撑新型互联网业务的创新发展和网络的稳定运行。展开更多
文摘随着5G时代的到来,网络中的用户数量及其访问行为所产生的流量呈爆发式增长。作为互联网基石,域名系统(domain name system,DNS)变得愈加重要,其不仅能够存储海量访问行迹,还能传递活动背后的行为信息。运用大数据技术挖掘DNS的数据信息,并对其进行分析处理,从中描述用户的行为逻辑,不仅能为判断未来的流量趋势、促进网络基础建设提供数据支持,还能为信息网络中的通信运营商、互联网企业等提供帮助,促进互联网信息技术的发展。
文摘With the widespread adoption of encrypted Domain Name System(DNS)technologies such as DNS over Hyper Text Transfer Protocol Secure(HTTPS),traditional port and protocol-based traffic analysis methods have become ineffective.Although encrypted DNS enhances user privacy protection,it also provides concealed communication channels for malicious software,compelling detection technologies to shift towards statistical featurebased and machine learning approaches.However,these methods still face challenges in real-time performance and privacy protection.This paper proposes a real-time identification technology for encrypted DNS traffic with privacy protection.Firstly,a hierarchical architecture of cloud-edge-end collaboration is designed,incorporating task offloading strategies to balance privacy protection and identification efficiency.Secondly,a privacy-preserving federated learning mechanismbased on Federated Robust Aggregation(FedRA)is proposed,utilizingMedoid aggregation and differential privacy techniques to ensure data privacy and enhance identification accuracy.Finally,an edge offloading strategy based on a dynamic priority scheduling algorithm(DPSA)is designed to alleviate terminal burden and reduce latency.Simulation results demonstrate that the proposed technology significantly improves the accuracy and realtime performance of encrypted DNS traffic identification while protecting privacy,making it suitable for various network environments.
文摘域名系统(Domain Name System,DNS)是互联网中用于将域名解析为IP地址的重要服务,DNS覆盖了绝大多数网络活动场景。关键信息基础设施涉及国家安全和社会稳定,其网络服务的正常运行依赖于DNS解析的完整性。DNS攻击不仅会导致服务中断,还可能窃取敏感信息,严重威胁关键信息基础设施的安全。因此,研究关键信息基础设施面临的DNS攻击威胁及其防范措施十分必要。文章梳理了DNS攻击的类型及其危害,深入分析了DNS攻击对关键信息基础设施的威胁,并提出了技术与管理协同的纵深防御体系,以期为保障关键信息基础设施的安全稳定运行提供参考。
文摘域名解析系统(Domain Name System,DNS)是互联网的核心组成部分,负责将域名转化为对应的IP地址。根、顶级域等权威服务器和本地域名服务器(Local DNS,LDNS)共同组成了DNS服务系统,其稳定运行直接关系到全球网络服务的可用性与安全性。基于20多年的运维经验,笔者提出构建新型域名解析运营体系,理顺域名所有者、运营者和秩序管理者的责权利关系,以期更好地支撑新型互联网业务的创新发展和网络的稳定运行。
