基于DNS重定向技术的网络安全审计系统

网络安全审计是网络管理的重要任务,是保障网络安全、稳定运行的重要方法。针对网络安全审计系统部署复杂、成本较高的问题,提出一种利用DNS重定向技术进行网络安全审计的方法。通过修改网关DNS配置,重定向网络数据流,在不改变网络结构和客户端配置的情况下,即可对网络数据进行行为审计。实验结果表明,该种审计方案安装简便、成本较低,有助于小型网络管理者增强安全防范能力及提高网络管理水平。

Network Security Audit System Based on Redirection of DNS

Network security auditing is an important task of network management,and it is also an important way to ensure network security and stability.Common network security audit system is complex and high cost.In view of this,we proposed a network security audit system based on redirection of DNS.The method by modifying the DNS configuration in gateway can monitor the data without changing the structure of the network or the configuration of clients.Experimental results show that it is simple,low cost and helpful for administrators to improve their capability of network ma-nagement.