Analysis of security extension protocol in e-mail system

Jingjing SHANG; Yujia ZHU; Qingyun LIU

doi:10.11959/j.issn.2096-109x.2020083

您当前的位置：

首页 >

文章列表页 >

Analysis of security extension protocol in e-mail system

Special Column:Network Application and Protection Technology | 更新时间：2024-06-03

- Analysis of security extension protocol in e-mail system
- Chinese Journal of Network and Information Security Vol. 6, Issue 6, Pages: 69-79(2020)
- 作者机构：
  
  1. 中国科学院大学网络空间安全学院，北京 100093
  2. 信息内容安全技术国家工程实验室，北京 100093
  3. 中国科学院信息工程研究所，北京 100093
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020083
  CLC： TP393
- Online First：2020-12，
  
  Published：15 December 2020
- 稿件说明：
移动端阅览
Jingjing SHANG, Yujia ZHU, Qingyun LIU. Analysis of security extension protocol in e-mail system[J]. Chinese Journal of Network and Information Security, 2020, 6(6): 69-79.
DOI：

Jingjing SHANG, Yujia ZHU, Qingyun LIU. Analysis of security extension protocol in e-mail system[J]. Chinese Journal of Network and Information Security, 2020, 6(6): 69-79. DOI： 10.11959/j.issn.2096-109x.2020083.

摘要

电子邮件是黑客发起网络攻击的主要入口，其中身份仿冒是电子邮件欺诈重要手段。基于邮件身份验证机制，构建属性图以测量政府机构电子邮件安全扩展协议全球采用率。从邮件内容仿冒、域仿冒、信头仿冒 3 个维度研究安全扩展协议部署效果。结果表明，各国政府机构邮件系统中部署 SPF 协议的约占70%，部署DMARC协议的不足30%，电子邮件身份检测采用率较低。当欺诈邮件进入收件人邮箱后，邮件服务提供商针对仿冒邮件警告机制有待完善。

Abstract

E-mail is the main entry point for hackers to launch network attacks.Impersonating a trusted entity is an important means of e-mail forged.An attribute graph based on the e-mail authentication mechanism was built to measure the global adoption rate of e-mail security extension protocols for government agencies.Research on the deployment effect of security extension protocol was from three dimensions:e-mail content phishing

domain phishing

and letterhead phishing.The results show that about 70% of the SPF protocols are deployed in the mail systems of government agencies in various countries

and less than 30% of the DMARC protocol is deployed.The adoption rate of email identity detection is low.When forged e-mail gets in

the e-mail providers' warning mechanism for counterfeit emails need to be improved.

关键词

Keywords

references

POSTEL J B . Request for comments:number 821 simple mail transfer protocol [M ] . RFC Editor , 1982 .

FOSTER I D , LARSON J , MASICH M , et al . Security by any other name:on the effectiveness of provider based email security [C ] // ACM Conference on Computer and Communications Security (CCS) . 2015 : 450 - 464 .

FREED N , BORENSTEIN N . Request for comments:number 2045 multipurpose internet mail extensions (MIME) part one:format of internet message bodies [M ] . RFC Editor , 1996 .

ATKINS D , STALLINGS W , ZIMMERMANN P . Request for comments:number 1991PGP message exchange formats [M ] . RFC Editor , 1996 .

RAMSDELL B . Request for comments:number 2633 S/MIME version 3 message specification [M ] . RFC Editor , 1999 .

HOFFMAN P E . Request for comments:number 3207 SMTP service extension for secure SMTP over transport layer security [M ] . RFC Editor , 2002 .

KITTERMAN S . Request for comments:number 7208 sender policy framework (SPF) for authorizing use of domains in email,version 1 [M ] . RFC Editor , 2014 .

KUCHERAWY M , CROCKER D , HANSEN T . Request for comments:number 6376 domain keys identified mail (DKIM) signatures [M ] . RFC Editor , 2001 .

KUCHERAWY M , ZWICKY E . Request for comments:number 7489 domain-based message authentication,reporting,and conformance (DMARC) [M ] . RFC Editor , 2015 .

柏宗超 , 姚健康 , 孔宁 . 基于DANE的电子邮件安全研究 [J ] . 计算机系统应用 , 2018 , 27 ( 7 ): 73 - 79 .

BAI Z C , YAO J K , KONG N . Research on email security based on DANE [J ] . Computer System Application , 2018 , 27 ( 7 ): 73 - 79 .

HOFFMAN P , SCHLYTER J . Request for comments:number 6698 the DNS-based authentication of named entities (DANE) transport layer security (TLS) protocol:TLSA [M ] . RFC Editor , 2012 .

DURUMERIC Z , ADRIAN D , MIRIAN A , et al . Neither snow nor rain nor MITM:an empirical analysis of email delivery security [C ] // Internet Measurement Conference (IMC) . 2015 : 27 - 39 .

HU H , WANG G . End-to-end measurements of email spoofing attacks [C ] // USENIX Security Symposium (USENIX Security) . 2018 : 1095 - 1112 .

HU H , PENG P , WANG G . Towards understanding the adoption of anti-spoofing protocols in email systems [C ] // IEEE Secure Development Conference (SecDev) . 2018 : 94 - 101 .

Views

727

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

EN-Bypass: a security assessment method on e-mail user interface notification

Related Author

Jingyi YUAN

Zichuan LI

Guojun PENG

Related Institution

No data

⁰