CN115277633A - Domain name description method, electronic device, and storage medium - Google Patents
Domain name description method, electronic device, and storage medium Download PDFInfo
- Publication number
- CN115277633A CN115277633A CN202210374744.4A CN202210374744A CN115277633A CN 115277633 A CN115277633 A CN 115277633A CN 202210374744 A CN202210374744 A CN 202210374744A CN 115277633 A CN115277633 A CN 115277633A
- Authority
- CN
- China
- Prior art keywords
- domain name
- attribute
- pedigree
- information
- target domain
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 40
- 230000008859 change Effects 0.000 claims abstract description 49
- 238000004590 computer program Methods 0.000 claims description 6
- 230000007246 mechanism Effects 0.000 claims description 6
- 238000012545 processing Methods 0.000 claims description 6
- 230000002123 temporal effect Effects 0.000 claims description 6
- 238000013507 mapping Methods 0.000 abstract description 5
- 238000001514 detection method Methods 0.000 description 9
- 238000011161 development Methods 0.000 description 9
- 238000003672 processing method Methods 0.000 description 7
- 238000011156 evaluation Methods 0.000 description 6
- 230000003068 static effect Effects 0.000 description 6
- 238000010586 diagram Methods 0.000 description 5
- 238000004891 communication Methods 0.000 description 4
- 230000008878 coupling Effects 0.000 description 3
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 238000012544 monitoring process Methods 0.000 description 3
- 230000004044 response Effects 0.000 description 3
- 239000000523 sample Substances 0.000 description 3
- 235000008694 Humulus lupulus Nutrition 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- 238000004458 analytical method Methods 0.000 description 1
- 238000004422 calculation algorithm Methods 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 230000009193 crawling Effects 0.000 description 1
- 238000013500 data storage Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000000605 extraction Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 238000012216 screening Methods 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
Images
Landscapes
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention relates to a domain name description method, electronic equipment and a storage medium, and relates to the field of network space mapping. The domain name description method comprises the following steps: acquiring a basic attribute and an application attribute of a target domain name; acquiring a pedigree attribute and a space-time attribute of the target domain name, wherein the pedigree attribute is used for describing the relation between the target domain name and other domain names, and the space-time attribute is used for describing the change of the target domain name in a time dimension and a space dimension; and assigning a preset domain name description model based on the basic attribute, the application attribute, the pedigree attribute and the space-time attribute so as to describe the target domain name. Because the attributes describing the target domain name comprise the variable pedigree attributes and the variable time-space attributes, the domain name description model can provide the variable conditions of the target domain name for the user, and can evaluate and map the domain name more accurately.
Description
Technical Field
The present application relates to the field of network space mapping, and in particular, to a domain name description method, an electronic device, and a storage medium.
Background
As the network space grows, domain names also grow, for example, the number of domain names is increasing, and domain name information (e.g., domain name owner, geographical location of domain name) is changing. However, most of the existing descriptions of domain names are single static descriptions of domain names, and the development and change conditions of domain names, including scale change conditions, domain name distribution change conditions and the like, cannot be known, which leads to the problems of inaccurate evaluation of domain names and difficult monitoring of domain names of specific types. For example, problems such as inaccurate domain name mapping result, inapplicable mapping data, and large deviation between the evaluation result and the actual result of the domain name may occur, or even a part of the domain names are not found and monitored in time after being changed, and a security problem may occur, for example, a malicious domain name is not found in time to cause a security problem.
Disclosure of Invention
In view of this, the present application aims to provide a domain name data processing method and a domain name description method, so as to obtain more comprehensive information of a domain name, so that a user can know the development and change conditions of the domain name, thereby accurately judging and evaluating the domain name, and timely finding a domain name of a specific type.
In order to achieve the above object, embodiments of the present application are implemented as follows:
in a first aspect, an embodiment of the present application provides a domain name data processing method, including: acquiring a domain name set of a network space and domain name information corresponding to each domain name in the domain name set; constructing a domain name pedigree based on the domain name information corresponding to each domain name in the domain name set, wherein the domain name pedigree is used for representing a pedigree relation of the relation between the domain names in the domain name set; and acquiring space-time change information corresponding to each domain name in the domain name set based on the domain name information corresponding to each domain name in the domain name set.
In the embodiment of the application, a domain name pedigree representing the relation between domain names in a domain name set is established by acquiring the domain name information corresponding to the domain names in the domain name set and the domain name set, so that a user can quickly search the domain name of a required type from the domain name pedigree, and the monitoring of the domain name is realized; by acquiring the time-space change information of the domain name, the change condition and the development condition of the domain name can be quickly known, and the domain name can be accurately evaluated. Therefore, the domain name in the network space can be more comprehensively described through the domain name information, the domain name pedigree and the time-space change information, so that a user can master the more comprehensive condition of the domain name, and the user is assisted to obtain a more accurate domain name evaluation result.
In one embodiment, the acquiring the time-space variation information corresponding to each domain name in the domain name set based on the domain name information corresponding to each domain name in the domain name set includes: acquiring the time change information of the corresponding domain name based on the historical change information; and acquiring the space change information of the corresponding domain name based on the IP positioning information.
In the embodiment of the application, the change of the domain name in the time dimension is acquired through the historical change information, and the change of the domain name in the space dimension is acquired through the IP positioning information, so that the domain name can be described through the change information in the time dimension and the space dimension, a user can master the change condition and the development condition of the domain name, and the domain name is accurately evaluated.
In an embodiment, the obtaining a domain name set of a network space and domain name information corresponding to each domain name in the domain name set includes: acquiring the domain name set through third party data, and/or actively detecting the domain name of a network space to acquire the domain name set; acquiring domain name information corresponding to each domain name in the domain name set comprises the following steps: and actively requesting the domain name information of each domain name in the domain name set.
In the embodiment of the application, the domain name set is acquired through third party data and/or active detection, the domain name set can be acquired in different modes, the diversity of data acquisition modes is improved, and then domain name information corresponding to each domain name in the domain name set can be acquired, so that the accuracy of domain name description can be improved, and a user can evaluate the domain name more accurately.
In an embodiment, the obtaining a domain name set of a network space and domain name information corresponding to each domain name in the domain name set includes: and acquiring the domain name set and domain name information corresponding to each domain name in the domain name set by a flow probe arranged at an outlet of the target network space.
In the embodiment of the application, the flow probe is arranged at the flow outlet of the network space, so that the domain name and the domain name information are passively detected, the omission of the domain name can be avoided, the complexity of domain name acquisition is reduced, and the efficiency of acquiring the domain name set and the domain name information is effectively improved.
In one embodiment, the domain name information corresponding to each domain name in the domain name set includes a whois data owner field, a website certificate corresponding to the domain name, a domain name string suffix, and a domain name resolution path, and the constructing a domain name pedigree based on the domain name information corresponding to each domain name in the domain name set includes: and when determining that any one of the whois data owner field consistency, the website certificate consistency corresponding to the domain name, the domain name character string suffix and the domain name resolution path similarity between any two domain names in the domain name set meets a preset comparison condition, establishing a relationship between the two domain names.
In the embodiment of the application, the relationship between two domain names is established by comparing the consistency of the whois data owner field of each two domain names, the consistency of the website certificate corresponding to the domain name, the suffix of the domain name character string and the similarity of the domain name resolution path when preset conditions are met, so that the relationship between different domain names is established, a user can conveniently search a required domain name according to characteristics, the type related to the required domain name is provided for the user, and the user is helped to evaluate the domain name.
In a second aspect, an embodiment of the present application provides a domain name description method, including: acquiring a basic attribute and an application attribute of a target domain name; acquiring a pedigree attribute and a space-time attribute of the target domain name, wherein the pedigree attribute is used for describing the relation between the target domain name and other domain names, and the space-time attribute is used for describing the change of the target domain name in a time dimension and a space dimension; and assigning a preset domain name description model based on the basic attribute, the application attribute, the pedigree attribute and the space-time attribute so as to describe the target domain name.
In the embodiment of the application, the preset domain name description model is assigned according to the acquired basic attribute, application attribute, pedigree attribute and time-space attribute of the target domain name, so that the target domain name is comprehensively described by using the preset domain name description model, more comprehensive information of the target domain name is provided for a user, and domain name data sharing is realized. Because the attributes describing the target domain name comprise the variable pedigree attributes and the variable time-space attributes, the domain name description model can provide the variable conditions of the target domain name for the user, and can evaluate and map the domain name more accurately.
In one embodiment, before the populating a preset domain name description model based on the base attribute, the application attribute, the lineage attribute, and the spatio-temporal attribute, the method further comprises: and constructing the preset domain name description model, wherein the preset domain name description model comprises a basic attribute entry, an application attribute entry, a pedigree attribute entry and a space-time attribute entry.
In the embodiment of the application, the preset domain name description model is constructed, the items corresponding to the obtained attributes can be directly filled when the domain name description model is used, the efficiency of describing the target domain name is effectively improved, in addition, various information of the target domain name can be more clearly displayed for a user through different items, the user can conveniently and quickly obtain required information, and further the domain name is evaluated and judged.
In one embodiment, before the populating a preset domain name description model based on the base attribute, the application attribute, the lineage attribute, and the spatio-temporal attribute, the method further comprises: obtaining a pedigree scale, a pedigree depth and a homologous relation of the target domain name based on the pedigree attribute, filling a preset domain name description model based on the basic attribute, the application attribute, the pedigree attribute and the spatiotemporal attribute, wherein the filled domain name description model is used for describing the domain name, and the method comprises the following steps: assigning a pedigree attribute entry of the preset domain name description model based on the pedigree scale, the pedigree depth and the homology relation.
In the embodiment of the application, the pedigree attribute items of the target domain name are assigned through pedigree scale, pedigree depth and a homologous relation, so that the domain name description model can show the development condition of the target domain name for a user, and further evaluate a domain name owner, and meanwhile, the pedigree attribute is convenient for the user to search the domain name of a required type according to the pedigree attribute of the target domain name, and the searching efficiency is improved.
In one embodiment, the obtaining the spatio-temporal attribute of the target domain name includes: obtaining the time attribute of the target domain name based on the relation between the pedigree scale and pedigree depth and time variation respectively; and acquiring the space attribute based on the IP positioning information in the basic attribute and the time attribute.
In the embodiment of the application, the time attribute of the target domain name is obtained through the change of the pedigree attribute in time, so that the domain name description model can describe the development condition of the target domain name, and the space attribute is obtained through the IP positioning information and the time attribute, so that the domain name description model can describe the change condition of the target domain name in the geographic position. Therefore, the change condition of the domain name is described more comprehensively through the time attribute and the space attribute, the user can be assisted to evaluate the domain name more accurately through the change condition, and the more accurate evaluation result of the target domain name is obtained.
In one embodiment, obtaining the base attribute comprises: sending an information acquisition request to a domain name registration mechanism of the target domain name to acquire the basic attribute of the target domain name; acquiring the application attribute; and detecting the website corresponding to the domain name to acquire the application attribute of the target domain name.
In the embodiment of the application, the request is sent to the domain name registration mechanism of the domain name and the website corresponding to the domain name is detected, so that the related information of the basic attribute and the application attribute of the target domain name is obtained respectively, the more accurate information of the target domain name is conveniently obtained and used, the more accurate description of the target domain name is realized, and the mapping data of the domain name and the domain name evaluation result are more accurate.
In a third aspect, an embodiment of the present application provides an electronic device, which includes a memory and a processor, where the memory stores computer-readable instructions, and the computer-readable instructions, when executed by the processor, cause the processor to execute the domain name data processing method according to the first aspect or implement the functions of the domain name description method apparatus according to the second aspect.
In a fourth aspect, the present application provides a computer-readable storage medium, in which a computer program is stored, and when the computer program runs on a computer, the computer is caused to execute the domain name data processing method according to the first aspect or implement the functions of the domain name description method apparatus according to the second aspect.
Additional features and advantages of the disclosure will be set forth in the description which follows, or in part may be learned by the practice of the above-described techniques of the disclosure, or may be learned by practice of the disclosure.
In order to make the aforementioned and other objects, features and advantages of the present invention comprehensible, preferred embodiments accompanied with figures are described in detail below.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings that are required to be used in the embodiments of the present application will be briefly described below, it should be understood that the following drawings only illustrate some embodiments of the present application and therefore should not be considered as limiting the scope, and that those skilled in the art can also obtain other related drawings based on the drawings without inventive efforts.
Fig. 1 is a flowchart of a domain name data processing method according to an embodiment of the present application;
fig. 2 is a flowchart of a domain name description construction method according to an embodiment of the present application;
FIG. 3 is a schematic diagram of a domain name description model provided in an embodiment of the present application;
fig. 4 is a block diagram of an electronic device according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more clearly understood, the present application is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.
Example 1
Referring to fig. 1, fig. 1 is a flowchart illustrating a domain name data processing method according to an embodiment of the present application, where the domain name data processing method may include the following steps.
S110, acquiring a domain name set of a network space and domain name information corresponding to each domain name in the domain name set.
In this embodiment, the network space may be a local area network or a wide area network, for example, the wide area network is the internet, and the local area network may be an intranet of a certain company.
In an embodiment, the manner of obtaining the domain name set of the cyberspace may be active detection or passive detection, or may be obtaining from third party data.
In this embodiment, the active detection may be sending request information to an IP (Internet Protocol Address) of the target network space to obtain a domain name set owned by the network space. It can be understood that there are many ways to obtain a Domain Name set in the prior art, and the way to actively detect and obtain the Domain Name set may refer to the prior art, for example, crawling from a website or implementing network space scanning corresponding to an IP through a full set of IP addresses, and analyzing a Domain Name set in a gTLD (Generic top-level Domain) region file, a top-level Domain Name region file, a direction DNS (Domain Name System ) record file, and other file extraction files, and will not be described herein again.
In this embodiment, the third-party data acquisition may use some existing network space detection platforms to detect a network space to be detected, and acquire detection data including a domain name set and domain name information corresponding to each domain name in the domain name set.
In this embodiment, the passive detection may further include setting a network traffic probe at a traffic outlet of the network space, collecting traffic at the traffic outlet of the network space, and extracting the domain name and information related to the domain name from the collected traffic to obtain the domain name set.
In this embodiment, the domain name information may include basic information such as an IP address, an owner, registration information, an analysis path, a certificate encryption method, state information, expiration time, update time, and a registration link corresponding to the domain name, and may further include domain name information such as domain name homepage information, certificate information, history change information of the domain name, and location information corresponding to the IP address. It should be noted that, when the target network space is a local area network, the registration information and the resolved path of the domain name are not needed.
In this embodiment, after the domain name set is obtained, domain name information corresponding to each domain name in the domain name set may also be obtained in different manners. For example, a search engine may be directly used to obtain domain name information corresponding to each domain name in the domain name set, and a domain name request may be simulated to obtain homepage information, so as to obtain information including related links, application scenarios, keywords, corresponding texts of the domain names. For another example, static information with unchanged domain name is obtained, and information such as owner, registration time, expiration time, state and the like corresponding to the domain name can be inquired by using a whois database; the domain name resolution process can be simulated to obtain the resolution path of the domain name and the IP address corresponding to the domain name; the website certificate can also be obtained by simulating domain name access, including but not limited to information such as a certificate authority, a certificate encryption mode, a certificate public key and the like. It can also be understood that the manner of obtaining domain name information may refer to the prior art, and is not described herein again.
In this embodiment, as for the data acquisition mode, a person skilled in the art may select one or more modes to perform. In some embodiments, the domain name information is used as a basis for describing the domain name, and a domain name set of a network space and domain name information corresponding to each domain name need to be acquired as comprehensively as possible, so that a plurality of data acquisition modes can be used to enrich data sources when acquiring the domain name set and the domain name information, and specifically, the data sources can include third-party data, active detection and passive detection, so that the acquired data is more comprehensive.
In this embodiment, after the domain name set and the domain name information corresponding to each domain name in the domain name set are obtained, the domain name and the corresponding domain name information may be stored in the database, so that the required domain name information can be directly called in the following.
S120, constructing a domain name pedigree based on domain name information corresponding to each domain name in the domain name set, wherein the domain name pedigree is used for representing the relation between the domain names in the domain name set.
In this embodiment, the relationship between the domain names includes a parent domain name, a child domain name, and a homologous domain name, for example, the relationship between a certain domain name and other domain names may be a parent domain name, a child domain name, and a homologous domain name of other domain names. The homologous domain name refers to that two domain names share a common parent domain name or share the same owner, for example, fanyi. As another example, when both the a.com and b.com domain names belong to the same company, the a.com and b.com are also the same source domain names.
In one embodiment, constructing a domain name pedigree based on domain name information corresponding to each domain name in the domain name set includes: when determining that any one of the four items of whois data owner field consistency, corresponding website certificate consistency, domain name character string suffix and domain name resolution path similarity between any two domain names in the domain name set meets a preset comparison condition, establishing a relation between the two domain names.
In this embodiment, the relationship between the domain names may be determined by comparing whois data owner field consistency between the domain names, website certificate consistency corresponding to the domain names, domain name string suffixes, domain name resolution path similarity, and the like, so as to establish a pedigree between the domain names.
Specifically, when the owner fields queried in the whois databases of the two domain names are the same, it may be determined that the two domain names belong to the same company, and then it may be determined that the two domain names are the homologous domain names. It can be understood that the whois database can be used to query the information of the domain name owner corresponding to the domain name, and when the owner fields are the same, the two domain names are characterized as belonging to the same owner, i.e. the two domain names can be determined as the homologous domain names.
When the domain name string suffixes between two domain names are the same, it may be determined that a relationship exists between the two domain names, for example, if the suffixes of the fanyi.
Further, when the suffix of a domain name is identical to that of another domain name, the relationship between the parent domain name and the child domain name can be determined, for example, if the suffix of the domain name fanyi.
The consistency of the website certificates corresponding to the two domain names can be determined by comparing whether the serial numbers of the certificates in the website certificates are the same or not, and when the serial numbers of the certificates are the same, the two website certificates can be considered to be consistent, so that the two website certificates belong to the same owner, and the two domain names are determined to be the homologous domain names.
Further, the certificate also has a spare name, and the relation between the two domain names can be determined by comparing the postfixes of the domain name strings of the certificate.
In the manner of determining two domain names by comparing the similarity of the domain name resolution paths, whether the last hops of the domain name resolution paths are the same or not may be compared, and when the last hops of the resolution paths are the same, the relationship of the homologous domain names between the two domain names may be determined to a certain extent.
In this embodiment, after the pedigree of the domain name is constructed, the pedigree of the domain name can be displayed to the user, so that the user can quickly find other domain names related to the required domain name according to the relationship between the domain names represented in the pedigree, and further obtain domain name information corresponding to the other domain names, thereby improving the efficiency of finding and obtaining the domain name and the domain name information.
In this embodiment, after the pedigree of each domain name in the domain name set is constructed, the pedigree may be stored in a preset database.
S130, acquiring the time-space variation information corresponding to each domain name in the domain name set based on the domain name information corresponding to each domain name in the domain name set.
In one embodiment, the temporal and spatial variation information includes temporal variation information and spatial variation information, and the temporal and spatial variation information corresponding to each domain name in the domain name set is obtained based on domain name information corresponding to each domain name in the domain name set, and includes: acquiring time change information of the corresponding domain name based on the historical change information; and acquiring the space change information of the corresponding domain name based on the IP positioning information.
In this embodiment, for the problem that the domain name change condition causes difficulty in monitoring/detecting the required domain name, the change information of the domain name in the time dimension and the space dimension is obtained by processing the obtained domain name information, so that the required domain name is conveniently determined from the change information. Specifically, the obtained domain name information corresponding to each domain name in the domain name set includes history change information and IP positioning information of the domain name. For example, the history change information may include various types of information of the sub domain name under a parent domain name, such as the number of sub domain names in the past year, the registration time, and the like. The IP positioning information is used to determine the domain name distribution, for example, a domain name corresponds to a corresponding IP address, and the geographic location of the IP address can be used to characterize the geographic location of the domain name.
Specifically, the time change information may be obtained by performing time-dimensional processing on historical change information, for example, information of the same domain name in different time periods may be extracted, different domain names are classified according to time, and the like, for example, a change of some information of the same domain name in different time periods may be an owner, a corresponding IP, a registration state, and the like, and further, for example, a change of the number of homologous domain names owned by a certain company over time may also be a case, specifically, the number of domain names owned by a certain company in the first year is 4, and the number of domain names owned by a certain company in the second year is 8. Because one domain name has one corresponding IP, the geographic position represented by the IP positioning information can be used for representing the geographic position of the domain name, and further the geographic position distribution conditions of different domain names can be determined through the IP positioning information corresponding to different domain names.
Here, the manner of determining the specific type of domain name through the time variation information and the pedigree is exemplified so that those skilled in the art can understand the technical effect of the present solution. First, for some domain names of a particular type, the user can quickly retrieve. For example, for a domain name including a specific suffix, or a domain name owned by a target company, etc., a desired domain name can be quickly obtained by the pedigree of the domain name. Secondly, the acquired data is the combination of static information and dynamic information, and the data displayed for the user comprises the static information and the dynamic information, wherein the static information is the invariable information such as domain name registration information, website certificates and the like, and the dynamic information is the changeable information such as the number of domain names, the scale of domain names, domain name addresses and the like, so that the user can determine the domain names obviously with abnormity in each domain name based on the history, the geographic position and the like according to the change condition of each domain name, and if the geographic position of the domain name is abnormally distributed with other homologous domain names and the registration time is shorter, the user can judge whether the domain name is a malicious domain name by combining the static information such as the registration information, the website certificates and the like, and carry out subsequent processing.
In the embodiment of the application, the pedigree representing the relation between the domain names in the domain name set is established by acquiring the domain name information corresponding to the domain names in the domain name set, so that a user can quickly find the domain name of a required type from the pedigree, and the change condition and the development condition of the domain name can be quickly known by acquiring the time-space change information of the domain name, so that the domain name can be accurately evaluated. Therefore, the domain name in the network space can be more comprehensively described through the domain name information, the pedigree and the time-space change information, so that a user can master the more comprehensive condition of the domain name, and the user is assisted to obtain a more accurate domain name evaluation result.
Example 2
Based on the same inventive concept, the application provides a domain name description method, which is used for jointly constructing the domain name description of a single domain name from multiple angles so that a user can acquire the domain name information of the domain name from the domain name description.
Referring to fig. 2, fig. 2 is a flowchart of a domain name description method according to an embodiment, where the domain name description method includes:
s210, acquiring the basic attribute and the application attribute of the target domain name.
In this embodiment, the basic attributes include, but are not limited to: domain name status, registration time, expiration time, update time, domain name identifier, domain name server, spatial address, IP address, owner of the domain name, domain name mailbox, registrar, etc.
In this embodiment, the application attributes include, but are not limited to: the website homepage, homepage keywords, homepage title, homepage certificate and URL (Uniform Resource Locator), wherein the homepage certificate may include certificate version, serial number, signature algorithm, issuer, validity period and user.
In this embodiment, the obtaining of the basic attribute and the application attribute of the target domain name may be calling from data stored in a database in advance, or may be detecting to a registration authority or a website corresponding to the target domain name.
In one embodiment, obtaining the base attribute comprises: and sending an information acquisition request to a domain name registration mechanism of the target domain name to acquire the basic attribute of the target domain name.
In this embodiment, the search engine may query the registrar that registered the domain name, thereby determining the registrar for the target domain name. The method comprises the steps of sending a request to a registration mechanism corresponding to a target domain name, obtaining response information returned by the registration mechanism, standardizing the response information, converting the response information into information in a uniform format, screening and extracting the information in the uniform format, and obtaining required field information, namely various information of basic attributes.
In one embodiment, obtaining the application attribute comprises: and detecting a website corresponding to the target domain name to acquire the application attribute of the target domain name.
In this embodiment, the website corresponding to the target domain name may be determined by the target domain name, and the application attributes such as the homepage information and the certificate information of the website may be acquired by detecting the website corresponding to the target domain name. The acquired application attributes are subjected to standardization processing, converted into a uniform format, and required field information is screened and extracted from the uniform format.
In this embodiment, the manner of obtaining the basic attribute and the application attribute of the target domain name may be also called from the database in embodiment 1, or may be also a manner of obtaining the basic attribute and the application attribute of the target domain name from a third-party data platform.
S220, obtaining the pedigree attribute and the space-time attribute of the target domain name.
In this embodiment, the pedigree attributes include, but are not limited to, pedigree size, pedigree depth, homology, etc. of the target domain name. In particular, the lineage attributes can include a parent domain name, a set of homologous domain names, a set of child domain names, a resolution path graph, and a lineage scale for the target domain name.
In this embodiment, the spatiotemporal attributes include a temporal attribute and a spatial attribute, where the temporal attribute is used to characterize the relationship between the pedigree scale and the pedigree depth and the time variation, respectively, and the spatial attribute is used to characterize the geographic location of the domain name. In particular, the spatiotemporal attributes may include a timestamp, a resolution type, historical resolution results, a geographic location, a set of resolved IP addresses, and the like.
In this embodiment, the pedigree attribute and the spatiotemporal attribute may be directly called from data obtained in advance, or may be obtained by processing a basic attribute and an application attribute of a target.
In this embodiment, the lineage attribute may be to construct a domain name lineage using the method in embodiment 1 described above, and obtain the constructed domain name lineage. The spatiotemporal attribute may be a spatiotemporal attribute determined by extracting spatiotemporal change information related to the target domain name from the spatiotemporal change information acquired in embodiment 1.
In one embodiment, based on the lineage attributes, lineage scale, lineage depth, and homology of the target domain name can be obtained. Wherein, the homologous domain name, the pedigree depth and the pedigree scale can be used for characterizing the development condition of the target domain name.
In this embodiment, after obtaining the pedigree attribute of the target domain name, a parent domain name, a child domain name set, and a homologous domain name set of the target domain name, for example, baidu.com, may be obtained through a relationship between domain names in the pedigree attribute, where the child domain name set includes ditu.baidu.com, fanyi.baidu.com, and the like, and the homologous domain name set may include hao123.com.
Similarly, according to the pedigree attribute, the pedigree depth can be determined, and the pedigree depth can be understood as the length of a relationship chain formed by domain names with progressive relationships, such as that the parent domain name of the baidu.
According to the pedigree attribute, the pedigree scale can further comprise the relationship and number between a parent domain name, a child domain name and a homologous domain name, such as a baidu.com, wherein the parent domain name is com, and comprises several child domain names including ditu.baidu.com and fanyi.baidu.com, and several homologous domain names including hao123.com.
In one embodiment, the time attribute of the target domain name is obtained based on the relationship between the pedigree scale and the pedigree depth and the time variation respectively; and acquiring the space attribute based on the IP positioning information and the time attribute in the basic attribute.
In this embodiment, the pedigree scale and pedigree depth of the target domain name may change over time, for example, a domain name needs to be newly registered due to development, some unnecessary domain names are unregistered, and the like, so that information of the change of the pedigree scale and pedigree depth over time, that is, a time attribute, may be established. For example, the change in lineage scale over time can be an increase and decrease in homologous domain names, an increase/decrease in subdomain names, etc.; the change of the pedigree depth along with time can be that new sub domain names are added or partial sub domain names are reduced on the basis of the original pedigree depth.
In this embodiment, the spatial attribute includes a geographical location of the domain name and a change of the geographical location. The domain name and the IP have a corresponding relation, so the positioning information of the IP can be used for determining the position information of the domain name, and on the basis, the geographic position of the domain name can be determined based on the positioning information of the IP. Further, the change of the geographic position of the domain name over time can be determined according to the geographic position determined by the time IP positioning information, for example, if the place characterized by the IP positioning information at the first time is a place a and the place characterized by the IP positioning information at the second time is a place B, the change of the geographic position of the domain name from the place a to the place B can be determined.
And S230, assigning values based on the preset domain name description model of the basic attribute, the application attribute, the pedigree attribute and the space-time attribute to describe the target domain name.
Referring to fig. 3, fig. 3 is a schematic diagram of a domain name description model according to an embodiment of the present application.
In this embodiment, after the basic attribute, the application attribute, the lineage attribute, and the spatio-temporal attribute of the target domain name are obtained, a pre-constructed domain name description model may be assigned, so that the domain name description model can describe the target domain name. Specifically, the extracted fields of different information of the basic attribute and the application attribute may be assigned to corresponding positions in the domain name description model to complete the filling of the basic attribute and the application attribute.
In this embodiment, the obtained pedigree attribute and the obtained spatiotemporal attribute are assigned to corresponding positions in the domain name description model to complete the filling of the pedigree attribute and the spatiotemporal attribute. And assigning the pedigree attributes based on the obtained pedigree scale, pedigree depth and homologous relation, and assigning the space-time attributes based on the obtained time attributes and space attributes.
In one embodiment, a domain name description model needs to be constructed in advance, and the preset domain name description model includes a basic attribute entry, an application attribute entry, a pedigree attribute entry and a spatiotemporal attribute entry.
In this embodiment, when a preset domain name description model is constructed, a basic attribute entry, an application attribute entry, a pedigree attribute entry, and a spatiotemporal attribute entry are respectively constructed, and sub-entries of the same type as the attribute type of the corresponding entry can be respectively set in each entry, so that when various attributes of the basic attribute, the application attribute, the pedigree attribute, and the spatiotemporal attribute describing the domain name are obtained, field information of the obtained attributes can be extracted to assign values to the corresponding attributes, and further, a domain name description model for the target domain name is constructed.
In the embodiment of the application, the preset domain name description model is assigned through the acquired basic attribute, the acquired application attribute, the acquired pedigree attribute and the acquired space-time attribute, so that the assigned domain name description model can comprehensively describe the target domain name, more comprehensive information of the target domain name is provided for a user, and the sharing of domain name data is realized. Because the attributes describing the target domain name comprise the variable pedigree attributes and the variable time-space attributes, the domain name description model can provide the variable conditions of the target domain name for the user, and can evaluate and map the domain name more accurately.
The method provided by the above embodiments can be implemented in the form of computer readable instructions, which can be executed on the electronic device as shown in fig. 3.
An electronic device provided by an embodiment of the present application includes a memory, a processor, and computer readable instructions stored in the memory and executable on the processor, where the processor implements the method provided by the above embodiment when executing the program.
Fig. 4 is a schematic diagram of an internal structure of an electronic device according to an embodiment of the present application, where the electronic device may be a server. Referring to fig. 4, the electronic device includes a processor, a nonvolatile storage medium, an internal memory, an input device, a display screen, and a network interface, which are connected by a system bus. The non-volatile storage medium of the electronic device may store an operating system and computer readable instructions, and when the computer readable instructions are executed, the processor may execute the method provided in the foregoing embodiment of the present application, and specific implementation processes of the method may refer to specific contents in fig. 1 and fig. 2, which are not described herein again. The processor of the electronic device is used for providing calculation and control capability and supporting the operation of the whole electronic device. The internal memory may store computer readable instructions, which when executed by the processor, may cause the processor to perform the methods provided by the embodiments described above. The input device of the electronic equipment is used for inputting various parameters, the display screen of the electronic equipment is used for displaying, and the network interface of the electronic equipment is used for network communication. Those skilled in the art will appreciate that the configuration shown in fig. 4 is a block diagram of only a portion of the configuration associated with the present application, and does not constitute a limitation on the electronic device to which the present application is applied, and a particular electronic device may include more or less components than those shown in the drawings, or combine certain components, or have a different arrangement of components.
Based on the same inventive concept, embodiments of the present application further provide a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed, the computer program performs the methods provided in the above embodiments.
The storage medium may be any available medium that can be accessed by a computer or a data storage device including one or more integrated servers, data centers, and the like. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid State Disk (SSD)), among others.
In the embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only one logical division, and there may be other divisions when actually implemented, and for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection of devices or units through some communication interfaces, and may be in an electrical, mechanical or other form.
In addition, units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional modules in the embodiments of the present application may be integrated together to form an independent part, or each module may exist alone, or two or more modules may be integrated to form an independent part.
The above description is only an example of the present application and is not intended to limit the scope of the present application, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present application shall be included in the protection scope of the present application.
Claims (9)
1. A method for describing a domain name, comprising:
acquiring a basic attribute and an application attribute of a target domain name;
acquiring a pedigree attribute and a space-time attribute of the target domain name, wherein the pedigree attribute is used for describing the relation between the target domain name and other domain names, and the space-time attribute is used for describing the change of the target domain name in a time dimension and a space dimension;
and assigning a preset domain name description model based on the basic attribute, the application attribute, the pedigree attribute and the space-time attribute so as to describe the target domain name.
2. The method of claim 1, wherein before assigning the predetermined domain name description model based on the base attribute, the application attribute, the lineage attribute, and the spatio-temporal attribute, the method further comprises: and constructing the preset domain name description model, wherein the preset domain name description model comprises a basic attribute entry, an application attribute entry, a pedigree attribute entry and a space-time attribute entry.
3. The method of claim 2, wherein before assigning the predetermined domain name description model based on the base attribute, the application attribute, the lineage attribute, and the spatio-temporal attribute, the method further comprises: and acquiring the pedigree scale, pedigree depth and homologous relation of the target domain name based on the pedigree attributes.
4. The method of claim 3, wherein assigning a predetermined domain name description model based on the base attribute, the application attribute, the lineage attribute, and the spatio-temporal attribute further comprises: assigning a pedigree attribute entry of the preset domain name description model based on the pedigree scale, the pedigree depth and the homology relation.
5. The method of claim 3, wherein the spatiotemporal attributes comprise a temporal attribute and a spatial attribute, and wherein obtaining the spatiotemporal attribute of the target domain name comprises: obtaining the time attribute of the target domain name based on the relation between the pedigree scale and pedigree depth and time variation respectively; and acquiring the space attribute based on the IP positioning information in the basic attribute and the time attribute.
6. The method of claim 1, wherein obtaining the base attribute comprises: sending an information acquisition request to a domain name registration mechanism of the target domain name to acquire the basic attribute of the target domain name;
the acquiring of the application attribute comprises: and detecting the website corresponding to the domain name to acquire the application attribute of the target domain name.
7. The method of claim 6, wherein after obtaining the base attribute and the application attribute of the target domain name, the method further comprises: and carrying out standardization processing on the basic attribute and the application attribute so as to convert the basic attribute and the application attribute into information with a uniform format.
8. An electronic device comprising a memory and a processor, the memory having stored therein computer-readable instructions that, when executed by the processor, cause the processor to perform the method of any of claims 1-7.
9. A storage medium, a computer-readable storage medium, having stored thereon a computer program which, when run on a computer, causes the computer to perform the method of any one of claims 1-7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210374744.4A CN115277633A (en) | 2022-01-24 | 2022-01-24 | Domain name description method, electronic device, and storage medium |
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210374744.4A CN115277633A (en) | 2022-01-24 | 2022-01-24 | Domain name description method, electronic device, and storage medium |
| CN202210076293.6A CN114124895A (en) | 2022-01-24 | 2022-01-24 | Domain name data processing method, domain name description method, electronic device and storage medium |
Related Parent Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210076293.6A Division CN114124895A (en) | 2022-01-24 | 2022-01-24 | Domain name data processing method, domain name description method, electronic device and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115277633A true CN115277633A (en) | 2022-11-01 |
Family
ID=80361112
Family Applications (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210374744.4A Pending CN115277633A (en) | 2022-01-24 | 2022-01-24 | Domain name description method, electronic device, and storage medium |
| CN202210076293.6A Pending CN114124895A (en) | 2022-01-24 | 2022-01-24 | Domain name data processing method, domain name description method, electronic device and storage medium |
Family Applications After (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210076293.6A Pending CN114124895A (en) | 2022-01-24 | 2022-01-24 | Domain name data processing method, domain name description method, electronic device and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (2) | CN115277633A (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115086411B (en) * | 2022-06-16 | 2023-12-05 | 京东城市(北京)数字科技有限公司 | IP positioning method, system, storage medium and electronic equipment |
| CN115277636B (en) * | 2022-09-14 | 2023-08-01 | 中国科学院大学 | Method and system for resolving universal domain name |
| CN116723051B (en) * | 2023-08-07 | 2023-10-27 | 北京安天网络安全技术有限公司 | Domain name information generation method, device and medium |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080120281A1 (en) * | 2006-11-22 | 2008-05-22 | Architecture Technology Corporation | Dynamic assembly of information pedigrees |
| US20170126729A1 (en) * | 2015-10-29 | 2017-05-04 | Duo Security, Inc. | Methods and systems for implementing a phishing assessment |
| CN109241292A (en) * | 2018-08-13 | 2019-01-18 | 恒安嘉新（北京）科技股份公司 | A method of name server architectural knowledge map is established based on the passive data of master |
| CN112995361A (en) * | 2021-04-30 | 2021-06-18 | 鹏城实验室 | Domain name knowledge graph construction method, device, equipment and storage medium |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2016198635A1 (en) * | 2015-06-11 | 2016-12-15 | Dot Stories Sa | Management of internet domain names |
| CN109165334B (en) * | 2018-09-20 | 2022-05-27 | 恒安嘉新（北京）科技股份公司 | Method for establishing CDN manufacturer basic knowledge base |
-
2022
- 2022-01-24 CN CN202210374744.4A patent/CN115277633A/en active Pending
- 2022-01-24 CN CN202210076293.6A patent/CN114124895A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080120281A1 (en) * | 2006-11-22 | 2008-05-22 | Architecture Technology Corporation | Dynamic assembly of information pedigrees |
| US20170126729A1 (en) * | 2015-10-29 | 2017-05-04 | Duo Security, Inc. | Methods and systems for implementing a phishing assessment |
| CN109241292A (en) * | 2018-08-13 | 2019-01-18 | 恒安嘉新（北京）科技股份公司 | A method of name server architectural knowledge map is established based on the passive data of master |
| CN112995361A (en) * | 2021-04-30 | 2021-06-18 | 鹏城实验室 | Domain name knowledge graph construction method, device, equipment and storage medium |
Non-Patent Citations (2)
| Title |
|---|
| CHEN ZHAO; YONGZHENG ZHANG; TIANNING ZANG; YIGE CHEN; YIPENG WANG: "A Multi-feature-based Approach to Malicious Domain Name Identification from DNS Traffic", 2020 27TH INTERNATIONAL CONFERENCE ON TELECOMMUNICATIONS (ICT) * |
| 包正晶等: "域名画像系统的设计与实现", 信息技术与网络安全, vol. 40, no. 6, pages 1 - 2 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114124895A (en) | 2022-03-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN115277633A (en) | Domain name description method, electronic device, and storage medium | |
| US10757101B2 (en) | Using hash signatures of DOM objects to identify website similarity | |
| US9686283B2 (en) | Using hash signatures of DOM objects to identify website similarity | |
| US20210314354A1 (en) | Techniques for determining threat intelligence for network infrastructure analysis | |
| Chen et al. | Web service recommendation via exploiting location and QoS information | |
| US11816161B2 (en) | Asset search and discovery system using graph data structures | |
| Tyagi et al. | An algorithmic approach to data preprocessing in web usage mining | |
| US20210194775A1 (en) | Internet address structure analysis, and applications thereof | |
| US20100293168A1 (en) | Determining configuration parameter dependencies via analysis of configuration data from multi-tiered enterprise applications | |
| US8504673B2 (en) | Traffic like NXDomains | |
| EP3913888A1 (en) | Detection method for malicious domain name in domain name system and detection device | |
| US20200228432A1 (en) | Network asset discovery | |
| US20130054782A1 (en) | Determination of unauthorized content sources | |
| Shestakov | Databases on the web: national web domain survey | |
| CN105516390A (en) | Method and device for managing domain name | |
| Shestakov | Sampling the national deep web | |
| US20190286671A1 (en) | Algorithmic computation of entity information from ip address | |
| CN112015910B (en) | Domain name knowledge base generation method and device, computer equipment and storage medium | |
| Dodge et al. | Internet-based measurement | |
| CN113079034B (en) | Internet basic resource and relation model thereof, and model construction and application method | |
| JP6170001B2 (en) | Communication service classification device, method and program | |
| US11218487B1 (en) | Predictive entity resolution | |
| Harika et al. | Extraction of knowledge from web server logs using web usage mining | |
| CN113779478A (en) | Abnormal ICP filing website detection method based on multivariate features | |
| JP7197531B2 (en) | Information processing device, information processing system, information processing method, and program |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20221101 |
|
| RJ01 | Rejection of invention patent application after publication |