主動式DNS網域安全設定檢測機制

Abstract

近年來，隨著網際網路的高度發展，多樣性的服務帶來了人類生活上的改變，也因此網際網路被稱為自工業革命以來另一項偉大的改革，網際網路所帶來的正面效益下，網路攻擊事件已漸漸成為網際網路上的一大威脅，惡意人士透過特殊的攻擊手法進行惡意的入侵、竊聽甚至是破壞的行為，已成為目前最令網路用戶頭痛的問題，基於此一因素，網路安全防護成了綱際網路發展上重要研究議題之一。
DNS伺服器對於網際網路正常運作有著相當重要的存在，以往相關研究在探討DNS安全時，焦點最常放置於DNS系統設計上的漏洞與缺失，在重視系統漏洞補強的同時，常忽略了DNS設定上的缺失及失效問題，亦是造成惡意攻擊者蒐集資料甚至是利用該缺失進行攻擊的另一管道。本研究預計提出以Web為介面之主動式DNS網域設定檢測機制，透過自動化的檢測環境達到檢測遠端主機設定是否正確並提出問題環節，協助使用者修正其設定問題，並與Twnic之DNS主機安全檢測機制相互搭配，建構一套完整的DNS安全環境檢測機制，改善台灣區DNS安全問題。Recently, along with Internet's rapid growth in user population and utilization, there are increasing incidences of attacks and intrusions which make this virtual space an insecure channel for communication and data exchange. DNS, as part of the fundamental network infrastructure, has a great influence on Internet security. Most DNS security related studies focused more on DNS implementation flaws and neglected inappropriate DNS setting as one of an important consideration. Therefore, the purpose of this research is to discuss DNS security problem from the aspect of mis-configuration. Also, a web-based DNS configuration assessment system will be developed based on the finding and current available technologies, to provide users an efficient and convenient way to evaluate DNS security. Finally, as part of the proposed solution, we also incorporate TWNIC DNS server security system into our system.