DNS安全威胁及应对措施研究

Research on DNS security threats and countermeasures

互联网域名系统DNS(Domain Name System)在过去的30年中,一直为全球互联网的稳定运行发挥了关键的支撑作用。文章回顾了DNS系统的发展历程,介绍了DNS工作原理和工作流程,重点分析了DDoS攻击、DNS服务软件、隐私泄露和DNS自身缺陷等对DNS体系安全稳定运行构成的威胁,并简要说明了采用DNSSEC、部署根镜像服务器、采用区块链技术推动DNS去中心化等应对DNS威胁的措施。

For the past three decades, DNS has played a key supporting role in the stable operation of the global Internet. This paper reviews the development of the DNS system, introduces the working principle and workflow of the DNS, and analyzes the threats to the security and stability of the DNS system, such as DDoS attacks, DNS service software, privacy leaks and DNS flaws, and briefly describes the DNSSEC technology, deployment the mirroring root server, and blockchain technology to promote DNS decentralization, to deal with those threats.