Research and implementation of DNSSEC monitoring system

摘要

DNS is one of internet infrastructure, but there also exist a lot of security vulnerabilities in it. The DNSSEC drafted by IETF is replacing the DNS for enhancing the security. However, the characteristics of DNSSEC have led to failure of the old monitoring system partly. This paper based on study of the DNSSEC protocol implementation and deployment proposes a kind of constructing plan about domain name redirecting, recursive domain name server record and national DLV trust chain. Then we establish an effective monitoring system. Finally, the feasibility of this plan has been verified in a simulated environment.