摘要
DNS是Internet最重要的基础设施之一,若遭受攻击将影响Internet的正常运转,因而其安全性备受关注。本文分析了传统以及新型(Kaminsky)DNS缓存投毒(Cache Poisoning)攻击的原理,给出攻击实例,详细描述了攻击流程,验证了DNS缓存投毒攻击潜在的危害性,并提出若干防御策略。
DNS is one of the most important basic infrastructures of the Intemet, attacks on which will prevent the Interact from working properly. Therefore, its security is receiving great concem. This paper analyzes the principles of both traditional and novel （Kaminsky） DNS Cache Poisoning, presents attack samples and describes the whole attack process in detail. After verifying the potential harm of DNS Cache Poisoning, the paper gives out several defense strategies.
