我国国家域名体系安全抽样研究及分析

域名系统是互联网的基础设施，作为互联网中枢神经，历来是黑客攻击的主要对象。根据对70家单位的域名安全抽样监测，然后对域名服务体系的拓扑结构、服务能力、安全状况、域名服务器的配置数据进行抽样分析，具有安全风险的超过半数以上。文章剖析了我国域名系统存在的问题：缺乏统一的整体管理、监控和分析，缺乏可商用的自主知识产权的域名服务系统软件，缺少统一的指导规范或行业标准。我国域名系统也将面临更多的挑战和机遇。

Research on Security Samples of National Domain Name System

Domain Name System（DNS） is the infrastructure of the internet. As the central nervous system of internet, DNS are always the main target of hackers＇ attacks. In April 2009, we monitored DNS system of 70 important units as a sample form the topology, service capacity, security, DNS server configuration, and analyzed the potential security risks of those units. From the results, we found that more than half of units were not safe. National DNS of China have those problems： lacking of tmified overall management, monitor and analysis, lacking of commercial DNS software belonging to Chinese IP, lacking of uniform guidance specifications or standards etc. DNS in China will face more challenges and opportunities.