客户端DNSSEC部署研究与实现  

DNSSEC Deployment Research and Implementation in Client

作　　者：陈加强[1] 时向泉[1] 陶静[1] 

机构地区：[1]国防科学技术大学计算机学院,湖南长沙410073

出　　处：《电脑与信息技术》2015年第5期23-26,共4页Computer and Information Technology

摘　　要：近年来,针对DNS(Domain Name System[1])的网络攻击给互联网带来了巨大的损失。DNSSEC(Domain Name System Security Extensions[2])为DNS提供了安全扩展,它支持数据来源和完整性检验,传统的DNSSEC部署模式不能完全解决DNS中间人攻击和缓存投毒问题,为了提高DNS服务器到客户端之间通信链路的安全,文章采取客户端部署DNSSEC的办法,实现了从客户端对DNS数据来源和完整性认证。In recent years, the network attacks of DNS taking advantage of its vulnerability have brought huge damage to the Internet. DNSSEC （Domain Name System Security Extensions） provide security extensions for DNS, supporting data origin authentication and data integrity. The traditional deployment of DNSSEC model can not completely solve the Man-in-the-Middle Attack and Cache Poisoning. In order to improve the communication link of DNS server to client safety, In this paper, we take the method of deploying DNSSEC in client to achieve integrity and authentication of DNS data.

关 键 词：客户端 部署 DNSSEC DNS 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]