摘要
基于对速变服务网络(Fast-flux service network,FFSN)的工作原理、申请流程、相关特征等分析,设计FFSN的检测流程,并提出了一种区分速变服务网络与合法网络的方法:详细分析两者相关域名系统属性的差异,构建检测特征,使用决策树算法检测速变服务网络的存在。实验证明,该方法可有效识别FFSN,具有较高的检测率。
The fast-flux service network (FFSN) testing process is designed based on the analysis of its working principle, application process and related characteristics. A method for distinguishing rapid change service network and legal network is put forward and the system attributes differences of the related domain name system are analyzed with details. The testing characteristics are constructed and the existence of rapid change service network is tested by decision tree algorithm. The experimental results show that this method can effectively identify FFSN and has a high detection rate.
作者
王佳佳
叶钰
李世杰
刘惠光
王一帆
WANG Jia-jia;YE Yu;LI Shi-jie;LIU Hui-guang;WANG Yi-fan(School of Information Technology, Taizhou Polytechnic College, Taizhou 225300, China)
出处
《南通职业大学学报》
2019年第3期77-82,共6页
Journal of Nantong Vocational University
基金
泰州职业技术学院博硕基金项目(TZYBS-17-6)
泰州职业技术学院大学生创新创业训练项目(YJDC2018017)
关键词
速变服务网络(FFSN)
域名系统
决策树算法
网络检测
网络安全
fast-flux service network (FFSN)
domain name system
decision tree algorithm
network detection
network security
