The problem of security protection of domain name server has aroused concern

What is the domain name and domain name resolution for the vast number of netizens, domain name is almost the Web site. Domain name is a Web site on the Internet, although the strict meaning and the Web site is different, but for ordinary netizens, the two are almost the same thing. IP can be regarded as a website in the machine world name, it and domain name is different "language" version of the same thing. National Computer network Emergency Technology Processing Coordination Center operation Director Sun Weimin said, the computer on the Internet access to any one of the target system (site), the premise is to know the target system IP address, the user is often remembered as the target system domain name. For example Netizen wants to visit Baidu Www.baidu.com, actually computer operation is to visit the IP address of Baidu. To provide computer users with a query based on the IP Address service system is the domain Name System, the English abbreviation for DNS (Domain Name system), so DNS is one of the most core Internet infrastructure. Domain name resolution is also a domain Name System provides a basic service, is the domain name and IP address of the mutual conversion. What harm does the domain name attack have to visit the website needs the URL, the domain name resolution is obviously the internet most basic service one, once has the problem, the influence may also be the basic sex. Sun Weimin said that if the resolution system security problems, light may cause some or some domain name can not be normal access, that is, the domain name represented by the Web site can not be accessed. For example, some domain names are directed to a hacker-specified IP address by a resolution server because of a "cache poisoning" attack. Heavy causes a large number of computer users to be unable to use the Internet normally, such as the DNS server of an operator to be paralyzed by denial of service attack, resulting in a wide range of users can not access the Internet. The Baidu was attacked, from the entire internet, just caused a Web site can not be accessed, but also because Baidu is the largest Chinese search engine, so the actual impact of the user's range is not small. Why is domain security so fragile? Because the website needs the domain name resolution service generally by the network operator to provide, therefore to the domain name server security often is not the website consideration content. Baidu suffered attacks, not hackers directly attack Baidu, but the attack to provide Baidu domain name resolution service operator Server. According to Baidu, is because of its domain name registrar in the United States, the domain name Analysis records were hacked, that is, when users visit Baidu, the URL can not be resolved into the correct IP address Baidu server, or be directed to other IP address. Sun Weimin introduced that the domain Name system security issues related to a variety of factors, first of all, the domain name Server software itself may have security vulnerabilities, the second domain name server performance and bandwidth redundancy is not enough to meet the sudden large number of requests, in addition, because of external malicious attack and abnormal. Prior to this, because the network security response and protection tend to focus on information disclosure, server authority control and other sites themselves, many Web site operators on the security of the domain name is not enough. However, with the frequent occurrence of security incidents of domain names, the security protection of domain name servers has aroused concern.