CN115277636B - Method and system for resolving universal domain name - Google Patents

Method and system for resolving universal domain name Download PDF

Info

Publication number
CN115277636B
CN115277636B CN202211117605.XA CN202211117605A CN115277636B CN 115277636 B CN115277636 B CN 115277636B CN 202211117605 A CN202211117605 A CN 202211117605A CN 115277636 B CN115277636 B CN 115277636B
Authority
CN
China
Prior art keywords
sub
domain name
list
resolution
domain
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202211117605.XA
Other languages
Chinese (zh)
Other versions
CN115277636A (en
Inventor
宁剑
沈传宝
肖达
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
University of Chinese Academy of Sciences
Original Assignee
University of Chinese Academy of Sciences
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by University of Chinese Academy of Sciences filed Critical University of Chinese Academy of Sciences
Priority to CN202211117605.XA priority Critical patent/CN115277636B/en
Publication of CN115277636A publication Critical patent/CN115277636A/en
Application granted granted Critical
Publication of CN115277636B publication Critical patent/CN115277636B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Abstract

The embodiment of the application discloses a method and a system for resolving a generic domain name, which are applied to the technical field of computers. The method comprises the following steps: acquiring a sub domain name list and sub domain name information of each sub domain name; traversing all the sub-domain names, and judging whether the sub-domain names with the same resolution record exist in the sub-domain name list according to the resolution record of the sub-domain name to be traversed; if so, judging whether the sub domain names with the same survival time value exist in the sub domain name list according to the survival time value of the sub domain name to be traversed; if yes, determining whether the response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list, and if yes, adding the sub-domain name to be traversed into a non-generalized resolution list; and outputting a non-generic resolution list until all the sub-domain names in the sub-domain name list are processed. Whether a domain name is resolved through flooding can be determined efficiently and concisely.

Description

Method and system for resolving universal domain name
Technical Field
The embodiment of the application relates to the technical field of computers, in particular to a method and a system for resolving a generic domain name.
Background
The decision tree is a supervised learning algorithm based on if-then-else rules, and through training of the rules of the decision tree, irrelevant features can be processed, and different types of data can be processed at the same time, so that data which accords with the standard better can be obtained. And the similarity comparison of responsivity is to obtain the similarity of two pages by comparing the phrase, the character, the HTML structure and the style of the two pages.
The prior art simply determines whether the domain name is widely resolved by enumeration, which is too inefficient and unable to enumerate all sub-domains. And a large number of false positives can occur by recording the method of generic parsing IP and storing as a blacklist. For example, resolution of an existing domain name onto an IP that has been marked as a blacklist can cause false positives.
Disclosure of Invention
Therefore, the embodiment of the application provides a method and a system for resolving a domain name, which are used for efficiently and simply judging whether a domain name is resolved through the domain name.
In order to achieve the above purpose, the embodiment of the present application provides the following technical solutions:
according to a first aspect of embodiments of the present application, there is provided a method for domain name resolution, the method including:
acquiring a sub domain name list and sub domain name information of each sub domain name; the subdomain name information comprises an analysis record and a survival time value;
traversing all the sub-domain names, and judging whether the sub-domain names with the same resolution record exist in the sub-domain name list according to the resolution record of the sub-domain name to be traversed; if not, adding the subdomain name to be traversed into a non-extensive parsing list;
if so, judging whether the sub domain names with the same survival time value exist in the sub domain name list according to the survival time value of the sub domain name to be traversed; if not, adding the subdomain name to be traversed into the non-extensive parsing list;
if yes, determining whether the response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list, and if yes, adding the sub-domain name to be traversed into the non-extensive parsing list;
and outputting the non-generic resolution list until all the sub-domain names in the sub-domain name list are processed.
Optionally, the determining whether the response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list, if so, adding the sub-domain name to be traversed into the non-generic resolution list includes:
performing similarity calculation on each sub-domain name in the non-extensive-resolution list, and determining the similarity between each sub-domain name and the rest sub-domain names in the non-extensive-resolution list;
and adding the sub-domain names with the similarity lower than a set threshold value in the non-extensive parsing list into a final non-extensive parsing list and outputting the final non-extensive parsing list.
Optionally, before the acquiring the sub domain name list and the sub domain name information of each sub domain name, the method includes:
acquiring a root domain name of the sub domain name;
judging whether a generic resolution behavior exists according to the root domain name, and if so, performing the next step of obtaining a sub domain name list and sub domain name information of each sub domain name; and if not, ending the screening of the root domain name.
Optionally, the resolution record of the sub domain name includes the sub domain name and the corresponding root domain name, sub domain name resolution data and resolution times, sub domain name first resolution time and last resolution time.
According to a second aspect of embodiments of the present application, there is provided a generic domain name resolution system, the system comprising:
the information acquisition module is used for acquiring a sub domain name list and sub domain name information of each sub domain name; the subdomain name information comprises an analysis record and a survival time value;
the first judging module is used for traversing all the sub-domain names and judging whether the sub-domain names with the same analysis records exist in the sub-domain name list according to the analysis records of the sub-domain names to be traversed; if not, adding the subdomain name to be traversed into a non-extensive parsing list;
the second judging module is used for judging whether the sub domain names with the same survival time value exist in the sub domain name list according to the survival time value of the sub domain name to be traversed if the sub domain names exist; if not, adding the subdomain name to be traversed into the non-extensive parsing list;
the third judging module is used for determining whether the response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list if the response similarity condition is met, and adding the sub-domain name to be traversed into the non-extensive parsing list if the response similarity condition is met;
and the output module is used for outputting the non-generic resolution list until all the sub domain names in the sub domain name list are processed.
Optionally, the third judging module is specifically configured to:
performing similarity calculation on each sub-domain name in the non-extensive-resolution list, and determining the similarity between each sub-domain name and the rest sub-domain names in the non-extensive-resolution list;
and adding the sub-domain names with the similarity lower than a set threshold value in the non-extensive parsing list into a final non-extensive parsing list and outputting the final non-extensive parsing list.
Optionally, the system further comprises:
the information acquisition module is also used for acquiring the root domain name of the sub domain name;
judging whether a generic resolution behavior exists according to the root domain name, and if so, performing the next step of obtaining a sub domain name list and sub domain name information of each sub domain name; and if not, ending the screening of the root domain name.
Optionally, the resolution record of the sub domain name includes the sub domain name and the corresponding root domain name, sub domain name resolution data and resolution times, sub domain name first resolution time and last resolution time.
According to a third aspect of embodiments of the present application, there is provided an electronic device, including: a memory, a processor and a computer program stored on the memory and executable on the processor, the processor executing the computer program to perform the method of the first aspect.
According to a fourth aspect of embodiments of the present application, there is provided a computer readable storage medium having stored thereon computer readable instructions executable by a processor to implement the method of the first aspect described above.
In summary, the embodiment of the application provides a method and a system for resolving a broad domain name, which are implemented by acquiring a sub domain name list and sub domain name information of each sub domain name; the subdomain name information comprises an analysis record and a survival time value; traversing all the sub-domain names, and judging whether the sub-domain names with the same resolution record exist in the sub-domain name list according to the resolution record of the sub-domain name to be traversed; if not, adding the subdomain name to be traversed into a non-extensive parsing list; if so, judging whether the sub domain names with the same survival time value exist in the sub domain name list according to the survival time value of the sub domain name to be traversed; if not, adding the subdomain name to be traversed into a non-extensive parsing list; if yes, determining whether the response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list, and if yes, adding the sub-domain name to be traversed into a non-generalized resolution list; and outputting a non-generic resolution list until all the sub-domain names in the sub-domain name list are processed. And efficiently and simply judging whether a domain name is obtained through extensive parsing.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below. It will be apparent to those of ordinary skill in the art that the drawings in the following description are exemplary only and that other implementations can be obtained from the extensions of the drawings provided without inventive effort.
The structures, proportions, sizes, etc. shown in the present specification are shown only for the purposes of illustration and description, and are not intended to limit the scope of the invention, which is defined by the claims, so that any structural modifications, changes in proportions, or adjustments of sizes, which do not affect the efficacy or the achievement of the present invention, should fall within the scope of the invention.
Fig. 1 is a schematic flow chart of a generic domain name resolution method provided in an embodiment of the present application;
fig. 2 is a flowchart of domain name resolution provided in an embodiment of the present application;
fig. 3 is a block diagram of a generic domain name resolution system according to an embodiment of the present application;
fig. 4 shows a schematic structural diagram of an electronic device according to an embodiment of the present application;
fig. 5 shows a schematic diagram of a computer-readable storage medium according to an embodiment of the present application.
Detailed Description
Other advantages and advantages of the present invention will become apparent to those skilled in the art from the following detailed description, which, by way of illustration, is to be read in connection with certain specific embodiments, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
Fig. 1 shows a generic domain name resolution method provided in an embodiment of the present application, where the method includes:
step S101: acquiring a sub domain name list and sub domain name information of each sub domain name; the subdomain name information comprises an analysis record and a survival time value;
step S102: traversing all the sub-domain names, and judging whether the sub-domain names with the same resolution record exist in the sub-domain name list according to the resolution record of the sub-domain name to be traversed; if not, adding the subdomain name to be traversed into a non-extensive parsing list;
step S103: if so, judging whether the sub domain names with the same survival time value exist in the sub domain name list according to the survival time value of the sub domain name to be traversed; if not, adding the subdomain name to be traversed into the non-extensive parsing list;
step S104: if yes, determining whether the response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list, and if yes, adding the sub-domain name to be traversed into the non-extensive parsing list;
step S105: and outputting the non-generic resolution list until all the sub-domain names in the sub-domain name list are processed.
In a possible implementation manner, in step S104, the determining whether the response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list, and if so, adding the sub-domain name to be traversed to the non-generic resolution list includes:
performing similarity calculation on each sub-domain name in the non-extensive-resolution list, and determining the similarity between each sub-domain name and the rest sub-domain names in the non-extensive-resolution list; and adding the sub-domain names with the similarity lower than a set threshold value in the non-extensive parsing list into a final non-extensive parsing list and outputting the final non-extensive parsing list.
In one possible implementation manner, before the acquiring the subdomain name list and the subdomain name information of each subdomain name in step S101, the method includes:
acquiring a root domain name of the sub domain name; judging whether a generic resolution behavior exists according to the root domain name, and if so, performing the next step of obtaining a sub domain name list and sub domain name information of each sub domain name; and if not, ending the screening of the root domain name.
In one possible implementation manner, the resolution record of the sub domain name includes the sub domain name and the corresponding root domain name, sub domain name resolution data, the number of times of resolution, the first resolution time and the last resolution time of the sub domain name.
Fig. 2 shows an embodiment diagram of a generic domain name resolution method provided in an embodiment of the present application, where the method includes the following steps:
step 1: acquiring a part of sub domain name list and sub domain name information of each sub domain name; the subdomain name information comprises an analysis record and a survival time value;
step 2: starting traversing each sub-domain name; for each sub-domain, judging whether the sub-domain list has the sub-domain name of the same resolution record according to the resolution record of the sub-domain to be traversed, and if not, marking the sub-domain name as a non-extensive resolution record; if the same is used for the first time, step 3 is entered;
step 3: judging whether the sub domain names with the same time-to-live value exist in the sub domain name list according to the time-to-live TTL value of the sub domain name to be traversed, if not, marking the sub domain names as non-extensive parsing records, and if so, entering the step 4;
step 4: storing all the non-extensive parsing records obtained in the step 3 in a list;
step 5: comparing all data in the list through response similarity comparison, determining whether the response similarity conditions are met according to the response similarity of the sub domain names to be traversed in the sub domain name list, and marking all data with the similarity less than eighty percent as non-extensive-resolution records;
step 6: and counting all the data marked as non-extensive parsing records, and outputting a document.
In summary, the embodiment of the present application provides a method for resolving a generic domain name, by acquiring a sub-domain name list and sub-domain name information of each sub-domain name; traversing all the sub-domain names, and judging whether the sub-domain names with the same resolution record exist in the sub-domain name list according to the resolution record of the sub-domain name to be traversed; if so, judging whether the sub domain names with the same survival time value exist in the sub domain name list according to the survival time value of the sub domain name to be traversed; if yes, determining whether the response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list, and if yes, adding the sub-domain name to be traversed into a non-generalized resolution list; and outputting a non-generic resolution list until all the sub-domain names in the sub-domain name list are processed. And efficiently and simply judging whether a domain name is obtained through extensive parsing.
Based on the same technical concept, the embodiment of the application further provides a generic domain name resolution system, as shown in fig. 3, where the system includes:
an information obtaining module 301, configured to obtain a sub domain name list and sub domain name information of each sub domain name; the subdomain name information comprises an analysis record and a survival time value;
a first judging module 302, configured to traverse all the sub-domain names, and judge whether the sub-domain names of the same resolution record exist in the sub-domain name list according to the resolution record of the sub-domain name to be traversed; if not, adding the subdomain name to be traversed into a non-extensive parsing list;
a second judging module 303, configured to judge whether the sub domain names with the same lifetime value exist in the sub domain name list according to the lifetime value of the sub domain name to be traversed if the sub domain names exist; if not, adding the subdomain name to be traversed into the non-extensive parsing list;
a third judging module 304, configured to determine whether a response similarity condition is met according to the response similarity of the sub-domain name to be traversed in the sub-domain name list, if yes, add the sub-domain name to be traversed to the non-extensive parsing list;
and the output module 305 is configured to output the non-generic resolution list until all the sub-domain names in the sub-domain name list are processed.
In a possible implementation manner, the third determining module 304 is specifically configured to:
performing similarity calculation on each sub-domain name in the non-extensive-resolution list, and determining the similarity between each sub-domain name and the rest sub-domain names in the non-extensive-resolution list; and adding the sub-domain names with the similarity lower than a set threshold value in the non-extensive parsing list into a final non-extensive parsing list and outputting the final non-extensive parsing list.
In one possible embodiment, the system further comprises:
the information obtaining module 301 is further configured to obtain a root domain name of the sub domain name; judging whether a generic resolution behavior exists according to the root domain name, and if so, performing the next step of obtaining a sub domain name list and sub domain name information of each sub domain name; and if not, ending the screening of the root domain name.
In one possible implementation manner, the resolution record of the sub domain name includes the sub domain name and the corresponding root domain name, sub domain name resolution data, the number of times of resolution, the first resolution time and the last resolution time of the sub domain name.
The embodiment of the application also provides the electronic device 20 corresponding to the method provided by the previous embodiment. Referring to fig. 4, a schematic diagram of an electronic device 20 according to some embodiments of the present application is shown. The electronic device 20 may include: a processor 200, a memory 201, a bus 202 and a communication interface 203, the processor 200, the communication interface 203 and the memory 201 being connected by the bus 202; the memory 201 stores a computer program executable on the processor 200, and the processor 200 executes the method provided in any of the foregoing embodiments of the present application when the computer program is executed.
The memory 201 may include a high-speed random access memory (RAM: random Access Memory), and may further include a non-volatile memory (non-volatile memory), such as at least one disk memory. The communication connection between the system network element and the at least one other network element is implemented through at least one physical port (which may be wired or wireless), and the internet, wide area network, local network, metropolitan area network, etc. may be used.
Bus 202 may be an ISA bus, a PCI bus, an EISA bus, or the like. The buses may be classified as address buses, data buses, control buses, etc. The memory 201 is configured to store a program, and the processor 200 executes the program after receiving an execution instruction, and the method disclosed in any of the foregoing embodiments of the present application may be applied to the processor 200 or implemented by the processor 200.
The processor 200 may be an integrated circuit chip with signal processing capabilities. In implementation, the steps of the above method may be performed by integrated logic circuits of hardware in the processor 200 or by instructions in the form of software. The processor 200 may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU for short), a network processor (Network Processor, NP for short), etc.; but also Digital Signal Processors (DSPs), application Specific Integrated Circuits (ASICs), field Programmable Gate Arrays (FPGAs) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. The disclosed methods, steps, and logic blocks in the embodiments of the present application may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of a method disclosed in connection with the embodiments of the present application may be embodied directly in hardware, in a decoded processor, or in a combination of hardware and software modules in a decoded processor. The software modules may be located in a random access memory, flash memory, read only memory, programmable read only memory, or electrically erasable programmable memory, registers, etc. as well known in the art. The storage medium is located in the memory 201, and the processor 200 reads the information in the memory 201, and in combination with its hardware, performs the steps of the above method.
The electronic device 20 provided in the embodiment of the present application and the method provided in the embodiment of the present application are the same inventive concept, and have the same advantages as the method adopted, operated or implemented by the same.
The present application further provides a computer readable storage medium corresponding to the method provided in the foregoing embodiments, referring to fig. 5, the computer readable storage medium is shown as an optical disc 30, on which a computer program (i.e. a program product) is stored, where the computer program, when executed by a processor, performs the method provided in any of the foregoing embodiments.
It should be noted that examples of the computer readable storage medium may also include, but are not limited to, a phase change memory (PRAM), a Static Random Access Memory (SRAM), a Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), a Read Only Memory (ROM), an Electrically Erasable Programmable Read Only Memory (EEPROM), a flash memory, or other optical or magnetic storage medium, which will not be described in detail herein.
The computer readable storage medium provided by the above-described embodiments of the present application has the same advantageous effects as the method adopted, operated or implemented by the application program stored therein, for the same inventive concept as the method provided by the embodiments of the present application.
It should be noted that:
the algorithms and displays presented herein are not inherently related to any particular computer, virtual machine, or other apparatus. Various general purpose devices may also be used with the teachings herein. The required structure for the construction of such devices is apparent from the description above. In addition, the present application is not directed to any particular programming language. It will be appreciated that a variety of programming languages may be used to implement the teachings of the present application as described herein, and the above description of specific languages is provided for disclosure of preferred embodiments of the present application.
In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the present application may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.
Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the application, various features of the application are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the application and aiding in the understanding of one or more of the various inventive aspects. However, the disclosed method should not be construed as reflecting the intention that: i.e., the claimed application requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the detailed description are hereby expressly incorporated into this detailed description, with each claim standing on its own as a separate embodiment of this application.
Those skilled in the art will appreciate that the modules in the apparatus of the embodiments may be adaptively changed and disposed in one or more apparatuses different from the embodiments. The modules or units or components of the embodiments may be combined into one module or unit or component and, furthermore, they may be divided into a plurality of sub-modules or sub-units or sub-components. Any combination of all features disclosed in this specification (including any accompanying claims, abstract and drawings), and all of the processes or units of any method or apparatus so disclosed, may be used in combination, except insofar as at least some of such features and/or processes or units are mutually exclusive. Each feature disclosed in this specification (including any accompanying claims, abstract and drawings), may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.
Furthermore, those skilled in the art will appreciate that while some embodiments described herein include some features but not others included in other embodiments, combinations of features of different embodiments are meant to be within the scope of the present application and form different embodiments. For example, in the following claims, any of the claimed embodiments can be used in any combination.
Various component embodiments of the present application may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that some or all of the functions of some or all of the components in the creation means of a virtual machine according to embodiments of the present application may be implemented in practice using a microprocessor or Digital Signal Processor (DSP). The present application may also be embodied as an apparatus or device program (e.g., computer program and computer program product) for performing a portion or all of the methods described herein. Such a program embodying the present application may be stored on a computer readable medium, or may have the form of one or more signals. Such signals may be downloaded from an internet website, provided on a carrier signal, or provided in any other form.
It should be noted that the above-mentioned embodiments illustrate rather than limit the application, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The application may be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by one and the same item of hardware. The use of the words first, second, third, etc. do not denote any order. These words may be interpreted as names.
The foregoing is merely a preferred embodiment of the present application, but the scope of the present application is not limited thereto, and any changes or substitutions easily contemplated by those skilled in the art within the technical scope of the present application should be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (8)

1. A method for domain name resolution in a broad domain, the method comprising:
acquiring a sub domain name list and sub domain name information of each sub domain name; the subdomain name information comprises an analysis record and a survival time value;
traversing all the sub-domain names, and judging whether the sub-domain names with the same resolution record exist in the sub-domain name list according to the resolution record of the sub-domain name to be traversed; if not, adding the subdomain name to be traversed into a non-extensive parsing list;
if so, judging whether the sub domain names with the same survival time value exist in the sub domain name list according to the survival time value of the sub domain name to be traversed; if not, adding the subdomain name to be traversed into the non-extensive parsing list;
if yes, carrying out similarity calculation on each sub-domain name in the non-extensive-resolution list, and determining the similarity between each sub-domain name and the rest sub-domain names in the non-extensive-resolution list; adding the sub-domain names with the similarity lower than a set threshold value in the non-extensive-resolution list into a final non-extensive-resolution list;
and outputting the non-generic resolution list until all the sub-domain names in the sub-domain name list are processed.
2. The method of claim 1, wherein prior to the obtaining the list of sub-domain names and sub-domain name information for each sub-domain name, the method comprises:
acquiring a root domain name of the sub domain name;
judging whether a generic resolution behavior exists according to the root domain name, and if so, performing the next step of obtaining a sub domain name list and sub domain name information of each sub domain name; and if not, ending the screening of the root domain name.
3. The method of claim 1, wherein the resolution record of the sub-domain name includes the sub-domain name and a corresponding root domain name, sub-domain name resolution data, number of times of resolution, sub-domain name first resolution time, and last resolution time.
4. A generalized domain name resolution system, the system comprising:
the information acquisition module is used for acquiring a sub domain name list and sub domain name information of each sub domain name; the subdomain name information comprises an analysis record and a survival time value;
the first judging module is used for traversing all the sub-domain names and judging whether the sub-domain names with the same analysis records exist in the sub-domain name list according to the analysis records of the sub-domain names to be traversed; if not, adding the subdomain name to be traversed into a non-extensive parsing list;
the second judging module is used for judging whether the sub domain names with the same survival time value exist in the sub domain name list according to the survival time value of the sub domain name to be traversed if the sub domain names exist; if not, adding the subdomain name to be traversed into the non-extensive parsing list;
the third judging module is used for carrying out similarity calculation on each sub-domain name in the non-extensive-resolution list if the sub-domain name exists, and determining the similarity between each sub-domain name and the rest sub-domain names in the non-extensive-resolution list; adding the sub-domain names with the similarity lower than a set threshold value in the non-extensive-resolution list into a final non-extensive-resolution list;
and the output module is used for outputting the non-generic resolution list until all the sub domain names in the sub domain name list are processed.
5. The system of claim 4, wherein the system further comprises:
the information acquisition module is also used for acquiring the root domain name of the sub domain name;
judging whether a generic resolution behavior exists according to the root domain name, and if so, performing the next step of obtaining a sub domain name list and sub domain name information of each sub domain name; and if not, ending the screening of the root domain name.
6. The system of claim 4, wherein the resolution record of the sub-domain name includes the sub-domain name and corresponding root domain name, sub-domain name resolution data, number of times of resolution, sub-domain name first resolution time, and last resolution time.
7. An electronic device, comprising: a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor executes to implement the method according to any of claims 1-3 when running the computer program.
8. A computer readable storage medium having stored thereon computer readable instructions executable by a processor to implement the method of any of claims 1-3.
CN202211117605.XA 2022-09-14 2022-09-14 Method and system for resolving universal domain name Active CN115277636B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202211117605.XA CN115277636B (en) 2022-09-14 2022-09-14 Method and system for resolving universal domain name

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202211117605.XA CN115277636B (en) 2022-09-14 2022-09-14 Method and system for resolving universal domain name

Publications (2)

Publication Number Publication Date
CN115277636A CN115277636A (en) 2022-11-01
CN115277636B true CN115277636B (en) 2023-08-01

Family

ID=83757077

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202211117605.XA Active CN115277636B (en) 2022-09-14 2022-09-14 Method and system for resolving universal domain name

Country Status (1)

Country Link
CN (1) CN115277636B (en)

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114124895A (en) * 2022-01-24 2022-03-01 中国电子信息产业集团有限公司第六研究所 Domain name data processing method, domain name description method, electronic device and storage medium

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8832283B1 (en) * 2010-09-16 2014-09-09 Google Inc. Content provided DNS resolution validation and use
EP2615772A1 (en) * 2012-01-10 2013-07-17 Thomson Licensing Method and device for timestamping data and method and device for verification of a timestamp
CN106210159B (en) * 2015-05-07 2019-12-13 阿里巴巴集团控股有限公司 Domain name resolution method and device
GB2555801A (en) * 2016-11-09 2018-05-16 F Secure Corp Identifying fraudulent and malicious websites, domain and subdomain names
CN108933846B (en) * 2018-06-21 2021-08-27 北京谷安天下科技有限公司 Method and device for identifying domain name by pan-resolution and electronic equipment
CN109040346B (en) * 2018-10-30 2021-08-13 深信服科技股份有限公司 Method, device and equipment for screening effective domain names in extensive domain name resolution
CN111200667B (en) * 2019-12-18 2021-08-10 网宿科技股份有限公司 Domain name resolution method, authoritative domain name server and local domain name server
CN112615945B (en) * 2020-12-18 2022-10-18 平安科技(深圳)有限公司 Domain name resolution record management method and device, computer equipment and storage medium
CN113286016B (en) * 2021-07-20 2021-09-28 中国人民解放军国防科技大学 Method and device for analyzing service range of cache domain name system
CN113810518A (en) * 2021-09-15 2021-12-17 北京知道未来信息技术有限公司 Effective sub-domain name recognition method and device and electronic equipment

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114124895A (en) * 2022-01-24 2022-03-01 中国电子信息产业集团有限公司第六研究所 Domain name data processing method, domain name description method, electronic device and storage medium

Also Published As

Publication number Publication date
CN115277636A (en) 2022-11-01

Similar Documents

Publication Publication Date Title
CN107273269B (en) Log analysis method and device
CN108427731B (en) Page code processing method and device, terminal equipment and medium
WO2018001078A1 (en) Url matching method and device, and storage medium
CN109271611B (en) Data verification method and device and electronic equipment
CN111124479B (en) Method and system for analyzing configuration file and electronic equipment
CN109743309B (en) Illegal request identification method and device and electronic equipment
CN111159709A (en) File type identification method, device, equipment and storage medium
CN116595542B (en) Vulnerability scanning method and system
CN110909361A (en) Vulnerability detection method and device and computer equipment
CN115277636B (en) Method and system for resolving universal domain name
CN111258905A (en) Defect positioning method and device, electronic equipment and computer readable storage medium
CN109992511B (en) Device and method for obtaining code test coverage rate
CN116127472A (en) Application security assessment method and device
CN116431127A (en) Low code development method, system, equipment and readable storage medium
CN115794697A (en) Memory access method and device
CN110598115A (en) Sensitive webpage identification method and system based on artificial intelligence multi-engine
CN110018844B (en) Management method and device of decision triggering scheme and electronic equipment
CN111859089B (en) Wrong word detection control method for Internet information
CN109710833B (en) Method and apparatus for determining content node
CN111352825B (en) Data interface testing method and device and server
CN110020670B (en) Model iteration method, device and equipment
CN116302985A (en) Pressure testing method and device, computer equipment and storage medium
CN114500261B (en) Network asset identification method and device, electronic equipment and storage medium
CN112966293B (en) Database dirty page detection method and device, computing device and storage medium
CN111274118B (en) Application optimization processing method, device and system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant