Domain Name Service system industry standard blank domain name security worrying

The intermediary transaction SEO diagnoses Taobao guest stationmaster buys the Cloud host technology Hall

January 12 this year, due to the United States domain name registration service provider Register.com major negligence, resulting in Chinese search engine Baidu's domain name analysis by unscrupulous criminals malicious tampering, fault up to 5 hours. While suffering huge economic losses, Baidu CEO Robin Li is more than "unprecedented" expression of emotion.

At present, the latest progress of this major failure is: U.S. time July 22, the U.S. Federal Court of New York ruled that allows Baidu to sue U.S. domain name providers register.com breach of contract, dereliction of duty and deal with the rash of hacker attacks. This domain name security accident undoubtedly for more Internet enterprises sounded the alarm.

The security situation of domain name is worrying

Domain Name System is to provide the IP address to be easy to remember the domain name of the service system, is the Internet's basic address resources, like the Internet air. However, there are currently 2,766 industry standards in China's communications industry, there is no industry standard and domain Name System. As the infrastructure of the network application, the supporting function of domain name is often neglected in the network application, and the importance of domain Name system is really known and accepted by netizens, but it originates from many large-scale network-breaking events caused by the domain Name System accident.

Not long ago, China Internet Network Information Center (CNNIC) and the North Dragon Network issued the first domestic "China Domain Name Service and security status Report", the report shows that from August 2009 to August 2010 a year time, the global large-scale domain name attacks as many as 20, security failures are pervasive, Related to the various levels of domain name services: There is a national top-level domain name accidents, such as Sweden's top-level domain. The Swedish national network paralysis caused by the technical problems of SE; there are also due to the telecommunications operators of recursive server paralysis caused by large area of broken nets, such as Storm audio and video events; Similarly, the Domain Name resolution service (DNS) provider's attack is curl, easy name Chinese DNS server attack caused tens of thousands of domain names can not be resolved, The new network caused 200,000 domain name "strike".

Industry standard blank of Domain Name Service system

According to the network hierarchy of the Internet, the Internet is roughly divided into physical layer, protocol layer and application layer, in nearly 3,000 communication industry standards, on the Internet equipment engineering and other physical layer standards occupy most of the protocol layer on the IP address standards are many, the protocol layer of the domain Name Service industry, no standard precedent, This is clearly inconsistent with the importance of domain names.

China Communication Standardization Association TC1 WG4 Deputy leader Xiaodong that, compared with the dominant network fraud and virus attacks, domain name failures have a wide range of impact and more serious losses, attacks concealed and cracked more difficult to start, resulting in very severe losses, the Internet at the bottom of the network life is blocked or even national information security crisis. Domain Name System as the foundation of 4 trillion e-commerce market, if there are security risks, the equivalent of building skyscrapers in the sand.

China Internet Network Information Center (CNNIC) Director Mao Wei introduced, domain name services in fact, including at least two categories, one is what we usually call the domain name registration service, the other is the domain name security operation and maintenance services, and in the use of the process, the domain name Security operational dimension is more important, But this aspect has not received enough attention for a long time.

Constructing domain name security protection with technical standard

What kind of domain name server deployment is a good mechanism? How to design a network to reduce the risk of domain Name System and Internet?

A Chinese Internet Network Information Center and the North Dragon in the joint drafting of the "China's Domain name security Protection series Operating Standards", has been entrusted to the Ministry of Industry and Information technology. "Standard" that, on the one hand, through the parameters of the standard, different domain names to choose different domain name services, on the other hand can determine the service level of the domain Name service provider, thus choosing the appropriate, level of domain Name service providers.

Some analysts believe that this means will change before the binding domain name extensive operation and maintenance services, domain Name service chain will usher in a clear, accurate service standards, which will help to enhance the domain name industry safety and reliability, thus from the foundation to enhance the security and credibility of the Internet.