CAJ | 학술논문

域名系统是互联网基础信息设施中的重要组成部分。但是，近年来利用域名系统的脆弱环节来进行攻击的事件层出不穷。因此，准确评估域名系统的运行情况和安全状况对互联网的安全保护工作至关重要。第二届关于DNS (Domain Name System)安全性、稳定性和弹性的讨论会报告已经指出了DNS健康的一些关键指标。在此基础上，MeNSa (Measuring the Naming System)项目又对这些指标进行了补充，并且提出了得到 DNS健康指标的评估框架，但是他们没有给出通过监控项的值计算健康指标的可行权重设置算法。因此本文提出了使用AHP算法(Analytic Hierarchy Process)来设置健康指标的权重，通过实验验证发现该算法很好的试用于该应用，并且当监控项增加时算法仍有效，具有良好的扩展性。
역명계통시호련망기출신식설시중적중요조성부분。단시，근년래이용역명계통적취약배절래진행공격적사건층출불궁。인차，준학평고역명계통적운행정황화안전상황대호련망적안전보호공작지관중요。제이계관우DNS (Domain Name System)안전성、은정성화탄성적토론회보고이경지출료DNS건강적일사관건지표。재차기출상，MeNSa (Measuring the Naming System)항목우대저사지표진행료보충，병차제출료득도 DNS건강지표적평고광가，단시타문몰유급출통과감공항적치계산건강지표적가행권중설치산법。인차본문제출료사용AHP산법(Analytic Hierarchy Process)래설치건강지표적권중，통과실험험증발현해산법흔호적시용우해응용，병차당감공항증가시산법잉유효，구유량호적확전성。
Domain Name System (DNS) is the foundation of modern cyber-world. Recently, the attacks that taken advantage of the weaknesses of DNS posed serious problems on DNS health and security. Measuring the health and security is signiifcantly important. A ifrst ofifcial discussion on indexes to measure DNS SSR is contained in the report of the 2nd Symposium on DNS SSR. The meeting proposed ifve key indexes to determine if the DNS is healthy. The MeNSa (Measuring the Naming System) project proposed a framework to quantify the key indexes of DNS health and security and deifned of a set of health and security metrics. However, how to decide the weights of the metrics is an unsolved key issue for the DNS security evaluation. In this paper, we propose an AHP based scheme to calculate the weights and present the corresponding experimental results.