|
|||||
|
|
| 域名系统安全研究综述 | |
| 引用本文： | 王 垚,胡铭曾,李 斌,闫伯儒.域名系统安全研究综述[J].通信学报,2007,28(9):91-103. |
| 作者姓名： | 王 垚 胡铭曾 李 斌 闫伯儒 |
| 作者单位： | 1. 哈尔滨工业大学,计算机网络与信息安全研究中心,黑龙江,哈尔滨,150001;中国外汇交易中心,上海,201203 2. 哈尔滨工业大学,计算机网络与信息安全研究中心,黑龙江,哈尔滨,150001 3. 哈尔滨工业大学,计算机网络与信息安全研究中心,黑龙江,哈尔滨,150001;微软亚洲工程院,北京,100086 |
| 基金项目： | 国家重点基础研究发展计划(973计划) |
| 摘 要： | 作为互联网关键基础设施的域名系统（DNS）其安全性正面临严峻考验。协议设计脆弱性导致数据信息真实性和完整性得不到保证;配置故障普遍存在,系统冗余性降低,单点失效问题严重;系统规模不断扩大导致管理难度急剧增加。从协议脆弱性、实现脆弱性和操作脆弱性3个方面对域名系统面临的威胁进行分类,综述了针对这些安全威胁的改进方案和研究成果,并论述了进一步研究中需要解决的关键问题。 |
| 关 键 词： | 域名系统 互联网基础设施 网络安全 |
| 文章编号： | 1000-436X（2007）09-0091-13 |
| 修稿时间： | 2006-04-202007-08-01 |
Survey on domain name system security |
|
| WANG Yao,HU Ming-zeng,LI Bin,YAN Bo-ru.Survey on domain name system security[J].Journal on Communications,2007,28(9):91-103. | |
| Authors: | WANG Yao HU Ming-zeng LI Bin YAN Bo-ru |
| Affiliation: | 1. Research Center of Computer Network and Information Security Technology, Harbin Institute of Technology, Harbin 150001, China; 2. China Foreign Exchange Trade System, Shanghai 201203, China; 3. Microsoft Adranced Technology Center, Beijing 100086, China |
| Abstract: | DNS(domain name system),as the critical Internet infrastructure,its security is facing great challenge.Proto-col design vulnerability provides no assurance for data authentication and integrity.Configuration errors are widespread with diminished server redundancy and severe single point of failure.The continuous development of system scale leads to the dramatic difficulty in administration.The threats towards DNS were categorized according to protocol,implemen-tation and operation vulnerability.The improvements and resolutions to these threats were summarized and the new problems in future study work were discussed. |
| Keywords: | domain name system Internet infrastructure network security |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ | |
| 点击此处可从《通信学报》浏览原始摘要信息 | |
| 点击此处可从《通信学报》下载全文 | |