域名系统的安全与防范

Security and Defense of Domain Name System

域名系统(DNS)用于主机名和IP地址之间的映射及电子邮件的选路信息,但由于其本身暴露脆弱性,致使域名服务器易受到攻击,将会造成严重的后果。本文介绍DNS的原理、可能攻击的手段及其防范,对于保护网络安全有指导意义。

The Domain Name System,named DNS,is used by TCP/IP application to map between hostnames and IP addresses, and to provide clectronic mail routing Information. DNS, exploited a vulnerability,is prone to become a primary target for attacker. In the paper,the principles of domain name system and the possible attacks are analyzed, then some countermeasur s are discussed. All of those are significant for making a computer network safer.