EDU.CN子域名异常解析现象测量  

Measurement on abnormal resolutions of EDU.CN subdomains

作　　者：冷春莹 陆超逸 张甲[1] 段海新[1] LENG Chunying;LU Chaoyi;ZHANG Jia;DUAN Haixin(Institute for Network Science and Cyberspace,Tsinghua University,Beijing 100084,China)

机构地区：[1]清华大学网络科学与网络空间研究院,北京100084

出　　处：《通信学报》2018年第A01期99-103,共5页Journal on Communications

基　　金：赛尔网络下一代互联网技术创新资助项目(No.NGII20160403)~~

摘　　要：出于保障教育网的域名服务的健康度及对异常DNS解析服务器进行排查的目的,分析了DNS解析服务器对中国教育网内域名进行解析的异常情况。通过全网扫描,从世界范围内挑选出了5 449个稳定的DNS解析服务器,用它们对所有211工程大学以及部分非211工程大学的域名进行了解析,并对解析结果中的异常现象进行了分析,发现了DNS劫持、权威域名服务器配制错误等问题。In order to guarantee the health index of domain names in CERNET as well as screen abnormal DNS resolver,Such an analyzation of abnormal results was proformed,which arisen from domain names in CERNET parsed by DNS resolvers.Through scanning all over the network,5449 stable DNS resolvers from all over the world and parsed all domain names of universities was selected in University of 211 Project and some domain names of other universities with them.Aravyzing all abnormal phenomena in parsing results,some problems such as DNS hijacking and wrong configuration were discovered in DNS authority name servers.

关 键 词：域名系统 DNS扫描 域名解析 DNS劫持 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]