电子邮件安全扩展协议应用分析

尚菁菁; 朱宇佳; 刘庆云

doi:10.11959/j.issn.2096-109x.2020083

您当前的位置：

首页 >

文章列表页 >

电子邮件安全扩展协议应用分析

专栏：网络应用与防护技术 | 更新时间：2024-06-03

- 电子邮件安全扩展协议应用分析
- Analysis of security extension protocol in e-mail system
- 网络与信息安全学报 2020年6卷第6期页码：69-79
- 作者机构：
  
  1. 中国科学院大学网络空间安全学院，北京 100093
  2. 信息内容安全技术国家工程实验室，北京 100093
  3. 中国科学院信息工程研究所，北京 100093
- 作者简介：
  
  [ "尚菁菁（1995- ），女，北京人，中国科学院大学硕士生，主要研究方向为网络空间安全" ]
  [ "朱宇佳（1984- ），女，江苏无锡人，博士，中国科学院信息工程研究所高级工程师，主要研究方向为网络空间测绘、安全态势感知技术" ]
  [ "刘庆云（1980- ），男，河北人，博士，中国科学院信息工程研究所高级工程师，主要研究方向为网络空间测绘、网络空间安全" ]
- 基金信息：
  
  中国科学院战略性先导科技专项;Chinese Academy of Sciences Strategic Pilot Project(XDC02030000);国家重点研发计划;National Key R ＆ D Program(2016YFB0801300)
- DOI：10.11959/j.issn.2096-109x.2020083
  中图分类号： TP393
- 网络首发：2020-12，
  
  纸质出版：2020-12-15
- 稿件说明：
移动端阅览
尚菁菁, 朱宇佳, 刘庆云. 电子邮件安全扩展协议应用分析[J]. 网络与信息安全学报, 2020,6(6):69-79.

Jingjing SHANG, Yujia ZHU, Qingyun LIU. Analysis of security extension protocol in e-mail system[J]. Chinese Journal of Network and Information Security, 2020, 6(6): 69-79.
尚菁菁, 朱宇佳, 刘庆云. 电子邮件安全扩展协议应用分析[J]. 网络与信息安全学报, 2020,6(6):69-79. DOI： 10.11959/j.issn.2096-109x.2020083.

Jingjing SHANG, Yujia ZHU, Qingyun LIU. Analysis of security extension protocol in e-mail system[J]. Chinese Journal of Network and Information Security, 2020, 6(6): 69-79. DOI： 10.11959/j.issn.2096-109x.2020083.

摘要

电子邮件是黑客发起网络攻击的主要入口，其中身份仿冒是电子邮件欺诈重要手段。基于邮件身份验证机制，构建属性图以测量政府机构电子邮件安全扩展协议全球采用率。从邮件内容仿冒、域仿冒、信头仿冒 3 个维度研究安全扩展协议部署效果。结果表明，各国政府机构邮件系统中部署 SPF 协议的约占70%，部署DMARC协议的不足30%，电子邮件身份检测采用率较低。当欺诈邮件进入收件人邮箱后，邮件服务提供商针对仿冒邮件警告机制有待完善。

Abstract

E-mail is the main entry point for hackers to launch network attacks.Impersonating a trusted entity is an important means of e-mail forged.An attribute graph based on the e-mail authentication mechanism was built to measure the global adoption rate of e-mail security extension protocols for government agencies.Research on the deployment effect of security extension protocol was from three dimensions:e-mail content phishing

domain phishing

and letterhead phishing.The results show that about 70% of the SPF protocols are deployed in the mail systems of government agencies in various countries

and less than 30% of the DMARC protocol is deployed.The adoption rate of email identity detection is low.When forged e-mail gets in

the e-mail providers' warning mechanism for counterfeit emails need to be improved.

关键词

Keywords

references

POSTEL J B . Request for comments:number 821 simple mail transfer protocol [M ] . RFC Editor , 1982 .

FOSTER I D , LARSON J , MASICH M , et al . Security by any other name:on the effectiveness of provider based email security [C ] // ACM Conference on Computer and Communications Security (CCS) . 2015 : 450 - 464 .

FREED N , BORENSTEIN N . Request for comments:number 2045 multipurpose internet mail extensions (MIME) part one:format of internet message bodies [M ] . RFC Editor , 1996 .

ATKINS D , STALLINGS W , ZIMMERMANN P . Request for comments:number 1991PGP message exchange formats [M ] . RFC Editor , 1996 .

RAMSDELL B . Request for comments:number 2633 S/MIME version 3 message specification [M ] . RFC Editor , 1999 .

HOFFMAN P E . Request for comments:number 3207 SMTP service extension for secure SMTP over transport layer security [M ] . RFC Editor , 2002 .

KITTERMAN S . Request for comments:number 7208 sender policy framework (SPF) for authorizing use of domains in email,version 1 [M ] . RFC Editor , 2014 .

KUCHERAWY M , CROCKER D , HANSEN T . Request for comments:number 6376 domain keys identified mail (DKIM) signatures [M ] . RFC Editor , 2001 .

KUCHERAWY M , ZWICKY E . Request for comments:number 7489 domain-based message authentication,reporting,and conformance (DMARC) [M ] . RFC Editor , 2015 .

柏宗超 , 姚健康 , 孔宁 . 基于DANE的电子邮件安全研究 [J ] . 计算机系统应用 , 2018 , 27 ( 7 ): 73 - 79 .

BAI Z C , YAO J K , KONG N . Research on email security based on DANE [J ] . Computer System Application , 2018 , 27 ( 7 ): 73 - 79 .

HOFFMAN P , SCHLYTER J . Request for comments:number 6698 the DNS-based authentication of named entities (DANE) transport layer security (TLS) protocol:TLSA [M ] . RFC Editor , 2012 .

DURUMERIC Z , ADRIAN D , MIRIAN A , et al . Neither snow nor rain nor MITM:an empirical analysis of email delivery security [C ] // Internet Measurement Conference (IMC) . 2015 : 27 - 39 .

HU H , WANG G . End-to-end measurements of email spoofing attacks [C ] // USENIX Security Symposium (USENIX Security) . 2018 : 1095 - 1112 .

HU H , PENG P , WANG G . Towards understanding the adoption of anti-spoofing protocols in email systems [C ] // IEEE Secure Development Conference (SecDev) . 2018 : 94 - 101 .

浏览量

727

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

EN-Bypass：针对邮件代发提醒机制的安全评估方法