摘要
DNS是目前大部分网络应用的基础,对它的攻击将影响整个Internet的正常运转。DNS欺骗攻击是攻击者常用的手法,它具有隐蔽性强、打击面广、攻击效果明显的特点,但是目前对这种攻击还没有好的防范策略。该文分析了DNS协议的工作原理,讨论了DNS协议在Internet中欺骗的实现,最后提出了一些检测和防范的措施。
DNS is a critical component of the operation of Internet applications.The Internet is greatly affected if DNS is attacked.DNS spoofing is one of the most popular attack means with the character of high dormancy and good attack effection.But so far,little is done to defend the system against this attack.This papar makes analysis of the work principle of the DNS protocols dicusses the implementation of DNS spoofing attack,in the end some means of the detection and the countermeasures are put forward.
作者
刘冰
胡风华
LIU Bing,HU Feng-hua(Henan Normal University College of Computer & Information Technology,Xinxiang 453007,China)
出处
《电脑知识与技术》
2009年第4Z期2824-2825,2832,共3页
Computer Knowledge and Technology
关键词
DNS
DNS欺骗
攻击检测
防范措施
domain name system(DNS)
DNS spoofing
attack detection
countermeasures
