电子邮件安全扩展协议应用分析  

Analysis of security extension protocol in e-mail system

作　　者：尚菁菁 朱宇佳 刘庆云[2,3] SHANG Jingjing;ZHU Yujia;LIU Qingyun(School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100093,China;National Engineering Laboratory for Information Security Technologies,Beijing 100093,China;Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China)

机构地区：[1]中国科学院大学网络空间安全学院,北京100093 [2]信息内容安全技术国家工程实验室,北京100093 [3]中国科学院信息工程研究所,北京100093

出　　处：《网络与信息安全学报》2020年第6期69-79,共11页Chinese Journal of Network and Information Security

基　　金：中国科学院战略性先导科技专项(XDC02030000);国家重点研发计划(2016YFB0801300)。

摘　　要：电子邮件是黑客发起网络攻击的主要入口,其中身份仿冒是电子邮件欺诈重要手段。基于邮件身份验证机制,构建属性图以测量政府机构电子邮件安全扩展协议全球采用率。从邮件内容仿冒、域仿冒、信头仿冒3个维度研究安全扩展协议部署效果。结果表明,各国政府机构邮件系统中部署SPF协议的约占70%,部署DMARC协议的不足30%,电子邮件身份检测采用率较低。当欺诈邮件进入收件人邮箱后,邮件服务提供商针对仿冒邮件警告机制有待完善。E-mail is the main entry point for hackers to launch network attacks.Impersonating a trusted entity is an important means of e-mail forged.An attribute graph based on the e-mail authentication mechanism was built to measure the global adoption rate of e-mail security extension protocols for government agencies.Research on the deployment effect of security extension protocol was from three dimensions:e-mail content phishing,domain phishing,and letterhead phishing.The results show that about 70%of the SPF protocols are deployed in the mail systems of government agencies in various countries,and less than 30%of the DMARC protocol is deployed.The adoption rate of email identity detection is low.When forged e-mail gets in,the e-mail providers'warning mechanism for counterfeit emails need to be improved.

关 键 词：电子邮件 安全扩展协议 域名密钥识别邮件标准 发件人策略框架 基于域的邮件验证、报告和一致性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]