DNSSEC技术原理及应用研究

DNS作为互联网服务的重要基础设施,存在着严重的安全漏洞,近年来针对这些安全漏洞的网络攻击给DNS和互联网带来了巨大损失。基于此,本文讨论了DNS安全扩展协议问题。文中首先对DNS的安全漏洞进行了分析,然后详细介绍了DNSSEC,主要从技术原理、实施过程、验证方法等方面进行了探讨;最后,对当前全球DNSSEC部署情况及发展趋势进行了总结和预测。

The Principle and Application Research of DNSSEC

As an importment infrastructure of the Internet, DNS itself has a serious security vulnerability, and in recent years a lot of network attacks to the DNS have brought great loss. On this basis, this paper explores the Principle and Applied problems of DNS Security Extension.The beginning introduction of the security vulnerability in DNS.Then the paper gives an detailed discussion of DNSSEC,mainly include technology principle, implementation process and DNSEC validation method.Finally,with the analysis of current global DNSSEC deployment,the paper explains the development of DNSSEC in the future.