| 本文已被：浏览 4771次 下载 10710次 |
码上扫一扫！ |
|
|
| DNS安全防护技术研究综述 |
|
王文通1,2, 胡宁1, 刘波2, 刘欣3, 李树栋1
|
|
1.广州大学 网络空间先进技术研究院, 广东 广州 510006;2.国防科技大学 计算机学院, 湖南 长沙 410073;3.长沙学院 计算机工程与应用数学学院, 湖南 长沙 410022
|
|
| 摘要: |
| DNS为互联网应用提供名字解析服务，是互联网的重要基础服务设施.近年发生的互联网安全事件表明DNS正面临严峻的安全威胁.DNS的安全脆弱性主要包括：协议设计脆弱性、技术实现脆弱性和体系结构脆弱性.针对上述脆弱性，对DNS协议设计、系统实现、检测监控和去中心化等方面的最新研究成果进行了归纳和总结，并且对未来可能的热点研究方向进行了展望. |
| 关键词: DNS安全 DNS脆弱性 DNS安全增强 DNS去中心化 |
| DOI：10.13328/j.cnki.jos.006046 |
| 分类号: |
| 基金项目:国家自然科学基金（61976064，61672020，61572513）；国防科技创新特区项目（18-H863-01-ZT-005-027-02）；装备预研重点实验室基金项目（61421030203） |
|
| Survey on Technology of Security Enhancement for DNS |
|
WANG Wen-Tong1,2, HU Ning1, LIU Bo2, LIU Xin3, LI Shu-Dong1
|
|
1.Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou 510006, China;2.College of Computer Science and Technology, National University of Defense of Technology, Changsha 410073, China;3.School of Computer Engineering and Applied Mathematics, Changsha University, Changsha 410022, China
|
| Abstract: |
| As a vital infrastructure of the Internet, DNS provides name resolution services for Internet applications. Major Internet incidents in recent years indicate that DNS is facing serious security threats. The vulnerability of DNS can be divided into three categories:protocol design vulnerability, technology implementation vulnerability, and architecture vulnerability. In view of the above vulnerabilities, the latest research achievements on DNS security enhancement are summarized which include protocol design, system implementation, DNS monitoring and DNS decentralization. Some possible future research hotspots and challenges are also discussed. |
| Key words: DNS security DNS vulnerability DNs security enhancement DNS decentralization |
