Research on a security method for domain name resolution on the client side

摘要

With the development of information technology, the domain name system (DNS) has become a very popular application. DNS forms the logical backbone of the World Wide Web, and the service which the DNS provides is used on the order of a trillion times a day. DNS security has garnered quite a lot of interest, due to the DNS cache-poisoning attacks discovered by Dan Kaminsky. In this paper, a security method for domain name resolution on the client side is employed to detection the security of the DNS protocol, especially when it is under DNS cache-poisoning attacks. At first, the framework of this method is given and then the whole process of mathematic analysis is proposed. The initial results on mathematic analysis are also proposed in this paper. Through the experimental results it can be seen that the security method for domain name resolution on the client side is useful for protecting DNS attacks.