Defense method of domain name hijacking and network outlet equipment

Abstract

The invention provides a defense method of domain name hijacking, which is suitable for network environment in which network outlet equipment is arranged between a client and a domain name server (DNS) or is suitable for network environment in which network outlet equipment is arranged between NS and DNS, wherein corresponding relation between each domain name and NS information is configured in the network outlet equipment. The method comprises the following steps: the network outlet equipment requests NS information corresponding to the designated domain name from the DNS; the network outlet equipment acquires the NS information returned from the DNS; if the network outlet equipment discovers that the returned NS information is different from the stored NS information corresponding to the designated domain name, the network outlet equipment judges whether domain name hijacking possibly occurs or not; if the domain name hijacking occurs, warning treatment or defense treatment is carried out; and if the domain name hijacking does not occur, the stored NS information corresponding to the designated domain name is updated to be the returned NS information. The invention also provides the network outlet equipment. The invention can prevent clients from being influenced because of occurrence of domain name hijacking.

Description

technical field [0001] The invention relates to domain name resolution technology, in particular to a defense method and network egress equipment for domain name hijacking. Background technique [0002] Currently, people usually use domain names (such as www.XXX.com) to access the Internet. Entities in the network generally identify each other through IP addresses. In order to ensure that people can access the network through the domain name, the network needs to convert the domain name to the IP address of one or some entities. This conversion work is generally called domain name resolution. The domain name resolution can be completed by a dedicated server, and the server that completes the domain name resolution is generally called a domain name system (DNS, Domain Name System) server. [0003] Combine below figure 1 , briefly introduce the process of domain name resolution. Such as figure 1 As shown, the client sends a request message carrying a domain name to the DN...

AI Technical Summary

Problems solved by technology

[0006] However, the current number of domain names and IP addresses is very large, and the administrator will pay a particularly high price for maintaining a large number of domain names and IP addresses in the DNS server, and there are also configuration errors and untimely update information. Therefore, The availability of the scheme of maintaining the corresponding relationship between domain names and IP addresses in the DNS server is not high

Images