China's domain Name Service security Status: A small number of domain name security issues remain outstanding

March 9 News, recently, China Internet Network Information Center (CNNIC) and the national Domain Name Security Alliance released the 2014 China Domain Name Service security status and Situation Analysis report (hereinafter referred to as the report). The paper reports the root Domain Name service system in the Internet Domain Name Service system of our country, the running state and security status of the top-level domain Name service system, the two level and the authoritative Domain Name service system and the recursive Domain Name Service system are comprehensively monitored and evaluated, which reflects the security configuration and running state of each link Domain Name service system. Overall analysis of the report shows that the overall security situation of China's domain name service has risen steadily, and a small number of domain Name Service security issues remain outstanding.

&NBSP
Reports show that, after periodic repeated monitoring and analysis, 2014 China's level of domain name servers using Linux/unix operating system is higher than 80%, the use of ISC BIND domain name resolution software is more than 90%, but more than 30% All levels of domain name servers used by the BIND software still supports version response, there are some security risks.
 
Data indicates that the root domain Service system has the highest level of support for DNSSEC, IPV6, TCP and other related protocols, adding 61 mirrored nodes in the year, with an average resolution speed of 20%. Top-level domain Name Service system related to the degree of support of the relevant agreement has been further strengthened, including DNSSEC support rate to 78%, the level of service redundancy further strengthened, a large number of new generic top-level domain to start external services. Global level Two and the following authoritative Domain Name service system in the relevant agreement to improve the degree of support is limited, but there is a more obvious improvement in the degree of service redundancy; For the domestic level two and the following authoritative domain Name service system, the correlation protocol support degree is relatively insufficient, but the service redundancy degree and the average resolution The recursive Domain Name Service system is still low in dnssec support, but the large packet support ratio is further enhanced. Domain Name City (domain.cn) March 9 News, recently, China Internet Network Information Center (CNNIC) and the national Domain Name Security Alliance issued the 2014 "China's Domain Name Service security situation and Situation Analysis report" (hereinafter referred to as the report). The paper reports the root Domain Name service system in the Internet Domain Name Service system of our country, the running state and security status of the top-level domain Name service system, the two level and the authoritative Domain Name service system and the recursive Domain Name Service system are comprehensively monitored and evaluated, which reflects the security configuration and running state of each link Domain Name service system. Overall analysis of the report shows that the overall security situation of China's domain name service has risen steadily, and a small number of domain Name Service security issues remain outstanding.
&NBSP
Reports show that, after periodic repeated monitoring and analysis, 2014 China's level of domain name servers using Linux/unix operating system is higher than 80%, the use of ISC BIND domain name resolution software is more than 90%, but more than 30% All levels of domain name servers used by the BIND software still supports version response, there are some security risks.
 
Data indicates that the root domain Service system has the highest level of support for DNSSEC, IPV6, TCP and other related protocols, adding 61 mirrored nodes in the year, with an average resolution speed of 20%. Top-level domain Name Service system related to the degree of support of the relevant agreement has been further strengthened, including DNSSEC support rate to 78%, the level of service redundancy further strengthened, a large number of new generic top-level domain to start external services. Global level Two and the following authoritative Domain Name service system in the related Agreement branchThe degree of improvement is limited, but there are obvious improvements in the degree of service redundancy; for the domestic two level and the following authoritative domain Name service system, the correlation protocol support degree is obviously relatively insufficient, but the service redundancy degree and the average resolution speed are relatively high. The recursive Domain Name Service system is still low in dnssec support, but the large packet support ratio is further enhanced.