区块链在域名系统安全中的应用进展综述  

Comprehensive Review of Application Progress of Blockchain in Domain Name System Security

作　　者：姬婕 岳鹏飞 李雷孝 杜金泽 林浩 高昊昱 JI Jie;YUE Pengfei;LI Leixiao;DU Jinze;LIN Hao;GAO Haoyu(College of Data Science and Application,Inner Mongolia University of Technology,Hohhot 010080,China;Inner Mongolia Autonomous Region Software Service Engineering Technology Research Center Based on Big Data,Hohhot 010080,China;College of Computer Science and Engineering,Tianjin University of Technology,Tianjin 300384,China;College of Cyberspace Security,Hainan University,Haikou 570228,China)

机构地区：[1]内蒙古工业大学数据科学与应用学院,呼和浩特010080 [2]内蒙古自治区基于大数据的软件服务工程技术研究中心,呼和浩特010080 [3]天津理工大学计算机科学与工程学院,天津300384 [4]海南大学网络空间安全学院,海口570228

出　　处：《计算机工程与应用》2024年第21期73-88,共16页Computer Engineering and Applications

基　　金：国家自然科学基金(62362055);内蒙古自然科学基金(2023QN06008,2023MS06008);校级科研启动金项目(DC2200001311);内蒙古自治区重点研发与成果转化计划项目(2022YFSJ0013,2023YFHH0052);内蒙古自治区高等学校青年科技英才支持计划项目(NJYT22084);鄂尔多斯市重点研发计划项目(YF20232328);内蒙古自治区直属高校科研项目(JY20220061,JY20230119,JY20230019)。

摘　　要：域名系统(domain name system,DNS)作为互联网的核心架构之一,面临可信度不足、安全保护薄弱等问题,而区块链通过多点同步、共享、复制数据提供了一种多中心或去中心,以及难以篡改的数据存储机制,已经成为提高DNS可信度和安全性的重要解决方案。然而,当前缺乏对区块链DNS相关文献的全面调研,亟需对相关研究进行综述,以推动区块链在DNS这一互联网的核心架构中的应用,进而提升互联网架构整体安全性。从协议和架构两个角度分析DNS现存的主要安全问题,将DNS威胁划分为重定向流量攻击和拒绝服务攻击;分析了主流防护措施的局限性,梳理了区块链在DNS中的相关研究,概述系统工作流程,从系统复杂度和安全性方面评价了当前方案;提出构建成熟可靠的区块链DNS需要解决的几个关键问题并给出未来研究方向。As one of the core architectures of the Internet,the domain name system(DNS)faces issues such as insuffi-cient credibility and weak security protection.Blockchain,with its mechanism of data storage that is multi-centered or decentralized,and difficult to tamper with by synchronizing,sharing,and replicating data across multiple points,has become an important solution to enhance the credibility and security of DNS.However,there is currently a lack of com-prehensive research on blockchain DNS,and there is an urgent need to review related studies to promote the application of blockchain in DNS,a core architecture of the Internet,thereby enhancing the overall security of the Internet infrastructure.The analysis begins from two perspectives:protocols and architecture,identifying the main security issues existing in DNS and categorizing DNS threats into traffic redirection attacks and denial of service attacks.Then,it examines the limita-tions of mainstream protective measures and reviews the relevant research on blockchain in DNS,summarizing the sys-tem workflow,and evaluates current solutions in terms of system complexity and security.Finally,it proposes several key issues that need to be addressed in building a mature and reliable blockchain DNS and presents future research directions.

关 键 词：域名系统(DNS) 区块链 分布式拒绝服务攻击 缓存中毒 网络空间安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]