Our country domain name attacks 58 daily average security DNS defense system construction urgently

Absrtact: A few days ago, the National Internet Emergency Center released the "2013 China Internet Network Security Report" shows that as the key infrastructure of the internet operation, our country domain Name System faces security vulnerabilities and denial of service attacks and other threats, is the impact of network stability, the National Internet Emergency Center released the " The 2013 China Internet Network Security report shows that as the key infrastructure of Internet operation, our country domain Name System is confronted with many kinds of threats, such as security loophole and denial of service attack, and it is the weak link that affects the stable operation of the network. 　　The Central Monitoring report shows that the average of 58 denial-of-service attacks against our country's domain Name System in 2013 is about a day. In this connection, the Internet domain Name System experts said that as the Internet's most important logical infrastructure, domain Name system and the corresponding technical standards constitute the Internet's central nervous system. The quality of the domain Name system directly determines the quality of the Internet and even the information society infrastructure that we want to build. 　　Judging from the current frequency of attacks, because the domain name registration service organization's domain name management system has the loophole, the attacker can tamper with the domain name resolution record at will, last year and this year, has occurred many government department website and provides the Internet service website domain name to hijack the event, causes the user access to be seriously affected. From the current security situation of domain name, our country domain Name System suffers from the phenomenon of denial of service attack. Last August, hackers were attacking one. CN end of the online games website, to our country. CN top-level domain Name System launched a large-scale denial of service attack, leading to a large number of government websites, Sina Weibo and other important sites can not access or slow access; This January, the domestic Internet DNS domain name resolution system has a wide range of access failures, a large number of Internet users in China can not normally access the domain name to ". com", ". 　　NET ", such as the end of the site; in March, including CCTV, NetEase, 56 network and other well-known web site access failure, access to the domain name can not be resolved domain name. 　　Internet domain Name System experts said that for the Internet domain Name System security incidents frequently, on the one hand to strengthen the network security management, through legal means to crack down on cybercrime; on the other hand, it also exposes the weakness of Internet DNS system in our country, and it is urgent to establish high security and anti attacking DNS defense system From our country Enterprise and government website's domain Name System present situation, most uses is the self-built DNS system or the ISP provides the free DNS system. Many of the DNS systems provided by the operation or ISP have been changed and optimized in addition to having to replace them because of hardware corruption. 　　In addition, many ISPs have only one data center, which means that if it fails, it will affect the corporate web site, may lead to performance degradation of the sexual web site, or even the site can not be accessed. He suggested that for Internet enterprises as well as large enterprises and institutions, the choice of professional DNS service agencies for consultation, and even commissioned professional third party tubeThe domain name server is an effective way to solve the problem. 　　Professional DNS service organizations can also provide high reliability and security services while providing a significant cost reduction relative to their own DNS systems. DNS Shield (dnsdun.com) is an authoritative domain resolution hosting service for high-end enterprise users, which is designed to provide more secure, faster and more efficient basic domain name resolution for high-end enterprise users, ensuring the smooth and reliable use of various network applications.