DNS重新绑定对Web浏览器的影响

域名系统(DNS)重新绑定破坏浏览器的区域源，并影响使用插件的浏览器与其插件之间的相互作用。根据DNS重新绑定攻击的机制，分析使用较短TTL响应DNS请求重新绑定主机到目标服务器的IP地址，使浏览器误认为2个服务器属于相同区域源，阐述浏览器访问相同区域源策略与多插件浏览器的易受攻击性。提出预防直接套接字访问客户端，阻止防火墙欺骗设法进入内部网络与滥用内部运行的服务，劫持IP地址进行点击欺骗、发送垃圾邮件与陷害客户端。

Affect of DNS Rebinding on Web Browser

Domain Name System(DNS)rebinding destroys the browser's regional sources,affects the used plug-in browser and browser plug-ins and their interactions.According to DNS rebinding attack mechanism,analyses the used shorter TTL that responds to DNS requests for rebinding the host to the target server's IP address,seduces browser to mistake two servers belong to the same-origin,and describes the browser access to the same-origin policy and multi plug-ins browser vulnerability.Prevent direct socket access to the client is presented,in order to prevent cheating to get into the internal network firewalls and abuse within the services running,hijacking IP address click fraud,sending spam and framed client.