云平台DNS安全体系研究  

Security Framework for Cloud DNS

作　　者：宋林健 马永 梁卓 SONG Linjian;MA Yong;LIANG Zhuo(Alibaba Cloud Computing Co.Ltd.,Beijing 100102,China)

机构地区：[1]阿里云计算有限公司,北京100102

出　　处：《中兴通讯技术》2023年第1期33-39,共7页ZTE Technology Journal

摘　　要：域名系统(DNS)是互联网的基础设施服务,对数字经济发展的安全和稳定至关重要。结合阿里云DNS的安全实践,提出了适应融合云时代发展的DNS安全体系,包括全链路和融合云DNS的应用场景,DNS南北向、东西向服务接口能力,以及在数据保密性、数据一致性、服务高可用、软件质量、安全运维、服务测量等多个维度的安全能力框架。The domain name system(DNS)is the infrastructure service of the Internet and is crucial to the continuous security and stability of the digital economy.Based on the security practice of Alibaba Cloud DNS,a DNS security framework suitable for the development of a con⁃verged cloud era is proposed,including the application scenarios of the all-link and converged cloud DNS,the south-north and east-west service interface capabilities of DNS,as well as a security capability framework in multiple dimensions such as confidentiality,Integrity,avail⁃ability,software quality,operation,and service measurement.

关 键 词：DNS 安全体系 互联网基础设施 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]