基于SPF和DMARC协议应用分析的邮件安全形势研究  

Email Security Situation based on Application Analysis of SPF and DMARC Protocol

作　　者：崔宁[1] 薛质[1] 施勇[1] 郭凤婵 CUI Ning;XUE Zhi;SHI Yong;GUO Fengchan(School of Cyber Science and Engineering of Shanghai Jiaotong University,Shanghai 200240,China;Jiangmen Power Supply Bureau,Guangdong Power Grid Corporation,Jiangmen Guangdong 529099,China)

机构地区：[1]上海交通大学网络空间安全学院,上海200240 [2]广东电网公司江门供电局,广东江门529099

出　　处：《通信技术》2021年第12期2703-2710,共8页Communications Technology

摘　　要：电子邮件服务作为目前广泛使用的一种互联网服务,一直是网络攻击的主要目标,然而由于简单邮件传输协议并没有过多的安全性设计,电子邮件系统的安全性基本依赖于之后添加的发件人策略框架,域名密钥识别邮件,基于域的消息认证、报告和一致性等安全协议。通过对4800多个公司或组织的电子邮件的发件人策略框架和基于域的消息认证、报告和一致性协议的配置情况进行评估研究,表明许多公司或组织并没有启用或正确配置这些安全机制。针对评估中发现的问题,提出了相应的缓解措施,帮助改进邮件系统的配置,提高邮件系统的安全性,大大降低钓鱼邮件攻击的风险。Currently,email service,as a widely used Internet service,is always the main target of network attacks.However,since the SMTP protocol does not have too much security design,the security of the email system basically relies on the added later security protocols such as SPF,DKIM,and DAMRC.This paper mainly uses SPF and DMARC configuration to evaluate and study the e-mail protocol deployment of more than 4800 companies or organizations.The results indicate that many companies or organizations have not enabled or properly configured these security mechanisms.In response to the problems found in the assessment,this paper proposes corresponding mitigation measures to help improve the configuration of the mail system,improve the security of the mail system,and greatly reduce the risk of phishing email attacks.

关 键 词：发件人策略框架 域名密钥识别邮件协议 基于域的消息认证、报告和一致性协议 电子邮件安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]