【摘要】 域名系统(DNS)服务在Internet服务中占据着非常重要的地位,但在最初设计DNS时却没有考虑它的安全问题,导致系统存在很多安全漏洞。针对它的安全脆弱性,文章对当前DNS遭受的网络攻击进行了深入分析,提出并剖析了一系列当前采用的安全防范措施;重点探讨了DNS安全扩展(DNSSEC)的安全防范思想、工作原理,并通过实例对它的工作流程进行具体分析,然后对DNSSEC做了性能评价,提出相关建议。最后在总结全文的基础上对DNS安全研究提出展望。更多还原

【Abstract】 The domain name system(DNS)plays an important role in Internet services.But it is found vulnerable in many as-pects because the original DNS specifications didn’t take secu-rity into consideration.In this paper,we analyze the current network attacks against DNS,propose a series of defending policies,and make some comments on them.Then we study the primary defending rules and working theories of DNSSEC,ana-lyze its work flow in detail by a specific example,and evaluate its performance.Finally we summarize this paper and show the developing trend of DNS security.更多还原