The Design And Implementation Of Domain Name Information Analysis Subsystem

With the global rapid development of the Internet,the user scale continues to grow,and the domain name registration has increased correspondingly.In order to strengthen the security management of domain names,the Ministry of Industry and Information Technology requires domestic domain name registries,domain name registrars and domain name authoritative analytical service providers to report the domain name information that they are in charge of respectively.However,at present,there are many problems in the reporting data of enterprises,including but not limited to: reporting errors,reporting omissions,incomplete information,invalid data,inaccurate data,and so on.These problems have greatly affected the relevant departments for the security of the domain name information,and at the same time,the availability of resource repositories is reduced.Utilizing the big data platform of National Internet Emergency Coordination Center and relying on the massive and rich basic data information,combining the business needs of the Ministry of Industry and Information Technology,the system can collect and analyze traffic data in from monitoring sites(the domestic provincial recursion servers)in real time,figure out the direction and matching packets of every packet,and find out abnormal events of DDo S attacks and machine generated domain names.Meanwhile,based on the domain name data from passive traffic,the domain name data is checked,the existing domain name data is further transformed into the resource database information,a system for analyzing basic domain name information is constructed,and the global domain name resource table is finally generated.This system not only provides direct technical support of analysis for domain name and other resource management services,but also improves the quality of existing domain name data and forms a complete and high-quality basic resource base of domestic domain name.It provides a strong guarantee for the record related verification business.This project meets the needs of building China's Internet domain name repository,and can monitor the integrity and accuracy of data.Finally,through actual tests,it is proved that this system can finish the automatic periodic report job of domain name information verification,and can discover some network anomaly events to meet the user's functional requirements and performance requirements,and the whole system can be put into use.