摘要
互联网域名系统DNS(Domain Name System)在过去的30年中,一直为全球互联网的稳定运行发挥了关键的支撑作用。文章回顾了DNS系统的发展历程,介绍了DNS工作原理和工作流程,重点分析了DDoS攻击、DNS服务软件、隐私泄露和DNS自身缺陷等对DNS体系安全稳定运行构成的威胁,并简要说明了采用DNSSEC、部署根镜像服务器、采用区块链技术推动DNS去中心化等应对DNS威胁的措施。
For the past three decades, DNS has played a key supporting role in the stable operation of the global Internet. This paper reviews the development of the DNS system, introduces the working principle and workflow of the DNS, and analyzes the threats to the security and stability of the DNS system, such as DDoS attacks, DNS service software, privacy leaks and DNS flaws, and briefly describes the DNSSEC technology, deployment the mirroring root server, and blockchain technology to promote DNS decentralization, to deal with those threats.
作者
苑朋朋
王常青
Yuan Pengpeng;Wang Changqing(China Internet Network Information Center,Beijing 100190)
出处
《网络空间安全》
2018年第5期50-54,共5页
Cyberspace Security
关键词
域名系统
分布式拒绝服务
域名系统安全扩展
区块链
domain name system
distributed denial of service
domain name system security extensions
block chain