Welcome to Journal of University of Chinese Academy of Sciences,Today is

›› 2015, Vol. 32 ›› Issue (1): 18-24.DOI: 10.7523/j.issn.2095-6134.2015.01.004

Previous Articles     Next Articles

Diagnosis of threat degree of IP addresses based on the generalized and regularized Mahalanobis distances

CHAO Ting1, LI Qizhai1, LIU Zhuojun1, SUN Cai2, SUN Yungang2   

  1. 1. Academy of Mathematics and Systems Science, Chinese Academy of Sciences, Beijing 100049, China;
    2. China Internet Network Information Center, Beijing 100190, China
  • Received:2013-12-31 Revised:2014-03-31 Online:2015-01-15

Abstract:

The domain name system (DNS) plays an important role in the internet, and maintaining its health and security is significant to the normal operation of the entire internet. To this end, we detect and shield the IP addresses that have potential threats to the name servers. We propose the generalized and regularized Mahalanobis distances to diagnose the threat degree of IP addresses. Both the methods efficiently solve the issue where the covariance matrix is singular. Real data analysis shows that the two proposed distances are very efficient in the diagnosis of threat degree of IP addresses.

Key words: DNS, generalized Mahalanobis distance, regularized Mahalanobis distance, IP address threat degree, diagnosis

CLC Number: