DNSSEC技术原理及应用研究  

The Principle and Application Research of DNSSEC

作　　者：高二辉[1] 张跃冬[1] 何峥[1] 

机构地区：[1]中国科学院计算机网络信息中心,北京100190

出　　处：《信息安全与技术》2013年第1期10-15,共6页

摘　　要：DNS作为互联网服务的重要基础设施,存在着严重的安全漏洞,近年来针对这些安全漏洞的网络攻击给DNS和互联网带来了巨大损失。基于此,本文讨论了DNS安全扩展协议问题。文中首先对DNS的安全漏洞进行了分析,然后详细介绍了DNSSEC,主要从技术原理、实施过程、验证方法等方面进行了探讨;最后,对当前全球DNSSEC部署情况及发展趋势进行了总结和预测。As an importment infrastructure of the Internet, DNS itself has a serious security vulnerability, and in recent years a lot of network attacks to the DNS have brought great loss. On this basis, this paper explores the Principle and Applied problems of DNS Security Extension.The beginning introduction of the security vulnerability in DNS.Then the paper gives an detailed discussion of DNSSEC,mainly include technology principle, implementation process and DNSEC validation method.Finally,with the analysis of current global DNSSEC deployment,the paper explains the development of DNSSEC in the future.

关 键 词：DNSSEC系统 DNS系统 域名解析 域名安全 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]