【摘要】 域名系统安全扩展(domain name system security extensions, DNSSEC)是IETF RFC2535定义的DNS安全认证机制,通过引入公钥加密技术,对区数据进行签名,可以很好的解决诸如缓存中毒、数据包欺骗等安全问题,对提高DNS的安全性具有重要意义.本研究基于校园网的特点,设计了一种适用于校园网环境的DNSSEC系统架构,并对其进行了部署实现,可进一步提升校园网的安全性.更多还原

【Abstract】 Domain name system security extensions(DNSSEC) is a DNS security authentication mechanism defined by IETF RFC2535. By introducing the public key encryption technology and signing the zone data, the security problems such as cache poisoning and packet spoofing can be solved, which is of great significance to improve the security of DNS. In this paper, according to the characteristics of campus network, a DNSSEC system architecture suitable for campus network environment is designed and implemented. It is found that the new system architechture can further improve the security of campus network.更多还原