DNS欺骗攻击的检测与防御

Detection and Prevention of DNS Spoofing Attacks

DNS在为Internet的正常运行提供可靠保障的同时也遭受来自网络的欺骗攻击威胁,DNS攻击具有隐秘性强、打击面大、攻击效果明显的特点。文章分析了DNS系统解析流程、DNS欺骗攻击原理和分类,并列出常见的欺骗攻击方式,提出不同检测方法,讨论了针对DNS欺骗攻击的防范策略,对提高DNS抗欺骗攻击能力具有明显效果。

When providing reliable guarantee for the normal operation of the Internet,the DNS is also spoofing attacks from the network.The DNS spoofing attacks are obvious characteristics with the strong privacy,larger surface combats and good attack effects.The paper analyzes the workflow of the DNS system,the principle and classification of the DNS spoofing attacks,and lists the common spoofing attacks,proposed different methods.And discussed the prevention strategies for the DNS spoofing attacks.These methods have obvious effects to improve the anti-spoofing capabilities of DNS.