摘要
域名系统安全扩展(domain name system security extensions,DNSSEC)是IETF RFC2535定义的DNS安全认证机制,通过引入公钥加密技术,对区数据进行签名,可以很好的解决诸如缓存中毒、数据包欺骗等安全问题,对提高DNS的安全性具有重要意义.本研究基于校园网的特点,设计了一种适用于校园网环境的DNSSEC系统架构,并对其进行了部署实现,可进一步提升校园网的安全性.
Domain name system security extensions(DNSSEC)is a DNS security authentication mechanism defined by IETF RFC2535.By introducing the public key encryption technology and signing the zone data,the security problems such as cache poisoning and packet spoofing can be solved,which is of great significance to improve the security of DNS.In this paper,according to the characteristics of campus network,a DNSSEC system architecture suitable for campus network environment is designed and implemented.It is found that the new system architechture can further improve the security of campus network.
作者
江魁
吴思维
王飞
JIANG Kui;WU Siwei;WANG Fei(Information Center,Shenzhen University,Shenzhen 518060,Guangdong Province,P.R.China;College of Electronics and Information Engineering,Shenzhen University,Shenzhen 518060,Guangdong Province,P.R.China)
出处
《深圳大学学报（理工版）》
EI
CAS
CSCD
北大核心
2020年第S01期50-54,共5页
Journal of Shenzhen University(Science and Engineering)
关键词
网络安全
校园网
域名系统安全扩展
密钥
流量监测
负载均衡
network security
campus network
domain name system security extensions(DNSSEC)
key
traffic monitoring
load balancing
