Design and implementation of DNSSEC system in campus network environment

Abstract

Domain name system security extensions (DNSSEC) is a DNS security authentication mechanism defined by IETF RFC2535. By introducing the public key encryption technology and signing the zone data, the security problems such as cache poisoning and packet spoofing can be solved, which is of great significance to improve the security of DNS. In this paper, according to the characteristics of campus network, a DNSSEC system architecture suitable for campus network environment is designed and implemented. It is found that the new system architechture can further improve the security of campus network.