DNS安全防护技术研究综述  

Survey on Technology of Security Enhancement for DNS

作　　者：王文通 胡宁 刘波[2] 刘欣 李树栋 WANG Wen-Tong;HU Ning;LIU Bo;LIU Xin;LI Shu-Dong(Cyberspace Institute of Advanced Technology,Guangzhou University,Guangzhou 510006,China;College of Computer Science and Technology,National University of Defense of Technology,Changsha 410073,China;School of Computer Engineering and Applied Mathematics,Changsha University,Changsha 410022,China)

机构地区：[1]广州大学网络空间先进技术研究院,广东广州510006 [2]国防科技大学计算机学院,湖南长沙410073 [3]长沙学院计算机工程与应用数学学院,湖南长沙410022

出　　处：《软件学报》2020年第7期2205-2220,共16页Journal of Software

基　　金：国家自然科学基金(61976064,61672020,61572513);国防科技创新特区项目(18-H863-01-ZT-005-027-02);装备预研重点实验室基金项目(61421030203)。

摘　　要：DNS为互联网应用提供名字解析服务,是互联网的重要基础服务设施.近年发生的互联网安全事件表明DNS正面临严峻的安全威胁.DNS的安全脆弱性主要包括:协议设计脆弱性、技术实现脆弱性和体系结构脆弱性.针对上述脆弱性,对DNS协议设计、系统实现、检测监控和去中心化等方面的最新研究成果进行了归纳和总结,并且对未来可能的热点研究方向进行了展望.As a vital infrastructure of the Internet,DNS provides name resolution services for Internet applications.Major Internet incidents in recent years indicate that DNS is facing serious security threats.The vulnerability of DNS can be divided into three categories:protocol design vulnerability,technology implementation vulnerability,and architecture vulnerability.In view of the above vulnerabilities,the latest research achievements on DNS security enhancement are summarized which include protocol design,system implementation,DNS monitoring and DNS decentralization.Some possible future research hotspots and challenges are also discussed.

关 键 词：DNS安全 DNS脆弱性 DNS安全增强 DNS去中心化 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]