Beijing Qihoo Technology Company Limited

Qizhi Software (Beijing) Company Limited

Chinese Academy of Sciences

Beijing Qihoo Technology Limited

Beijing Acell Technology Co., Ltd.

Xiangdong Qi

Hongyi Zhou

Xiaosheng Tan

Can Pu

Jinlin Wang

Lingfang Wang

Jiali You

Tingyi Li

The present invention provides a DNS security system and failure processing method. The DNS security system comprises: at least one client, configured to initiate a DNS request; a root node, configured to provide authorization information to the DNS request; an authorization information database, configured to store all DNS requests and corresponding authorization information in a designated area; a virtual root node, configured to invoke corresponding authorization information from the authorization information database when a DNS resolution failure occurs on the root node, and to provide a resolution service to a corresponding client. Using the present invention enhances the security and stability of DNS resolution.

DNS security system and failure processing method

Provided are a DNS cache information processing method, device and system. The method comprises: upon reception of a client request, resolving and obtaining domain name information requested by the client; querying in a database a data structure corresponding to the domain name information; when finding the data structure, acquiring read lock information corresponding to the data structure, the read lock information being permission information allowing performing a read operation of the cache information stored in the data structure; reading the cache information in the data structure by using the permission of the read lock information, and transmitting the read cache information to a sender requested by the client. The embodiment of the present invention can improve caching speed and cache information throughput, improving the flexibility of cache information, and enhancing the quality of stored information.

Method, device and system for processing DNS cache information

A method of detecting a malware based on a white list comprises: receiving on a server side a program feature and/or a program behavior of a program to be detected sent from a client side; comparing the program feature and/or the program behavior of the detected program with legitimate program features and/or legitimate program behaviors stored in a white list; obtaining a legitimacy information of the unknown program based on the comparison result and feeding this back to the client side. In the invention, a legitimate program is determined by using a white list, thereby determining an illegitimate program excluded from the white list as a malware, which performs a determination and detecting and removing of a malware from another perspective.

Method of detecting a malware based on a white list

A storage network structure comprises a primary distributed storage network (a cluster distributed storage network or a DHT (Distributed Hash Table)-based peer-to-peer storage network) and a Peterson graph-based storage network. The storage network structure provides different reliability classes for applications and combines the advantages of a peer-to-peer based distributed network storage with Peterson graph-based network storage, solve the problem of a large quantity of data migrating by utilizing the better media data migrating non-movable property from the Peterson graph-based network storage, and screen the single failure of the cluster storage structure and avoid performance degradation of peer-to-peer wide area storage by combining with the availability and robustness of Distributed Hash Table.

Storage network structure based on the Peterson graph and data read-write method thereof

Growing community of inventors

Beijing, China

Xiangdong Qi