DNS欺骗攻击的检测和防范.PDFVIP

32 21 2006 11 Vol.32 No.21 Computer Engineering November 2006 ·· 2006 A TP393.08 DNS ( 150001) DNS Internet DNS DNS 3 3 DNS DNS DNS Detection and Defence of DNS Spoofing Attack YAN Boru, FANG Binxing, LI Bin, WANG Yao (National Key Lab on Computer Context Information Security, Harbin Institute of Technelogy, Harbin 150001) AbstractDNS is a critical component of the operation of Internet applications. The Internet is greatly affected if DNS is attacked. DNS spoofing is one of the most popular attack means with the character of high dormancy and good attack effection. But so far, little is done to defend the systerm against this attack. Three methods are presented to detect DNS spoofing attack, and then another three techniques are proposed to identify the bogus packets and the right ones to ensure DNS service even attacked. Key wordsDomain name system (DNS); DNS spoofing; Attack detection DNS IP DNS DNS DNS [1] DNS 2005 3 ISC 1 DNS DNS .COM DNS 1 300 (SANS Institute) DNS / (DNS Spoofing) 2004 20 BIND [2]