| 基于真实IPv6地址环境下的安全DNS系统设计 |
| |
| 引用本文： | 谢锐,顾一众,汪为农.基于真实IPv6地址环境下的安全DNS系统设计[J].厦门大学学报(自然科学版),2007,46(A02):29-33. |
| |
| 作者姓名： | 谢锐 顾一众 汪为农 |
| |
| 作者单位： | 上海交通大学网络信息中心,上海200030 |
| |
| 基金项目： | CNGI示范工程2005年研究开发、产业化及应用试验项目“面向IPv6的互联网安全体系结构和关键技术研究”资助. |
| |
| 摘 要： | 网络的安全保证变得日趋重要,在下一代互联网上这种要求更为迫切.以真实IPv6地址接入技术为平台,结合PK I的证书分发机制对密钥的分发实现安全便捷的管理,利用密钥机制对DNS全程数据通信进行签名加密保护进而可以实现下一代互联网络体系结构中DNS系统的安全,包括安全的域名更新、安全的域名查询以及抵御常见的DNS攻击.
|
| 关 键 词： | IPv6 DNS 签名 加密 CNGI |
| 文章编号： | 0438-0479（2007）S2-0029-03 |
| 修稿时间： | 2007-06-15 |
Design of a Secure DNS System Based on Real IPv6 Address Network |
| |
| XIE Rui, GU Yi-zhong, WANG Wei-nong.Design of a Secure DNS System Based on Real IPv6 Address Network[J].Journal of Xiamen University(Natural Science),2007,46(A02):29-33. |
| |
| Authors: | XIE Rui GU Yi-zhong WANG Wei-nong |
| |
| Affiliation: | Network Information Center, ShanghaiJiaotong University, Shanghai 200030, China |
| |
| Abstract: | Network security guarantee has become increasingly important in the next generation Intemet, such a request is more urgent than ever. Based on real IPv6 accessing technology, integrating with the PKI certificate distribution mechanism to achieve safe and convenient management on key distribution mechanism and using key mechanism to signature and encrypt the entire DNS data communications can protect the security of Next Generation DNS system, including the security of the domain name updates, security of domain lookup and withstanding common DNS attacks. |
| |
| Keywords: | IPv6 Domain Name System signature encryption China Next Generation Interact Project |
| 本文献已被 维普 等数据库收录！ |
|
