基于动态域名水印的IPv6 DNS服务发现方法

韩丁康; 朱宇佳; 赵蕾; 焦亮; 刘庆云

doi:10.11959/j.issn.2096-109x.2024066

您当前的位置：

首页 >

文章列表页 >

基于动态域名水印的IPv6 DNS服务发现方法

专题：互联网域名安全 | 更新时间：2024-12-20

- 基于动态域名水印的IPv6 DNS服务发现方法
- Method for the discovery of IPv6 DNS services based on the dynamic domain name watermarks
- 网络与信息安全学报 2024年10卷第5期页码：56-70
- 作者机构：
  
  1.中国科学院信息工程研究所，北京 100085
  2.中国科学院大学网络空间安全学院，北京 100049
- 作者简介：
  
  [ "韩丁康（1999- ），男，河南焦作人，中国科学院信息工程研究所硕士生，主要研究方向为网络空间测绘。" ]
  [ "朱宇佳（1984- ），女，江苏无锡人，博士，中国科学院信息工程研究所副研究员，主要研究方向为网络空间测绘、域名安全、网络大数据分析。" ]
  [ "赵蕾（2001- ），女，山东泰安人，中国科学院信息工程研究所硕士生，主要研究方向为网络空间测绘。" ]
  [ "焦亮（1986- ），男，山东滨州人，中国科学院信息工程研究所博士生，主要研究方向为网络空间测绘。" ]
  [ "刘庆云（1980- ），男，河北人，博士，中国科学院信息工程研究所正研级高级工程师、博士生导师，主要研究方向为网络空间测绘、网络空间安全。" ]
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2024066
  中图分类号： TP393
- 收稿：2024-05-27，
  
  修回：2024-07-22，
  
  纸质出版：2024-10-25
- 稿件说明：
移动端阅览
韩丁康, 朱宇佳, 赵蕾, 等. 基于动态域名水印的IPv6 DNS服务发现方法[J]. 网络与信息安全学报, 2024, 10(5): 56-70.

Format: HAN D K, ZHU Y Y, ZHAO L, et al. Method for the discovery of IPv6 DNS services based on the dynamic domain name watermarks[J]. Chinese Journal of Network and Information Security, 2024, 10(5): 56-70.
韩丁康, 朱宇佳, 赵蕾, 等. 基于动态域名水印的IPv6 DNS服务发现方法[J]. 网络与信息安全学报, 2024, 10(5): 56-70. DOI： 10.11959/j.issn.2096-109x.2024066.

Format: HAN D K, ZHU Y Y, ZHAO L, et al. Method for the discovery of IPv6 DNS services based on the dynamic domain name watermarks[J]. Chinese Journal of Network and Information Security, 2024, 10(5): 56-70. DOI： 10.11959/j.issn.2096-109x.2024066.

摘要

IPv6环境下的域名系统（DNS，domain name system）服务发展迅速，开展IPv6环境下DNS服务发现方法研究，对分析DNS服务在IPv6环境下的全球发展态势，提升服务可靠性具有非常重要的意义。基于IPv4和IPv6的合作解析关系，通过跨栈服务关联发现IPv6 DNS服务是一种有效的方法。然而，现有基于跨栈服务关联的IPv6 DNS服务发现方法受DNS探测包长度限制，探测能力有限。针对此问题，提出一种基于动态域名水印的IPv6 DNS服务发现方法。该方法利用自建权威服务器构建动态域名资源记录，绕过探测包长度限制。相比传统方法，该方法发现的IPv6 DNS服务数量提升接近98%；同时，通过解析水印日志记录，发现了解析器间存在大量解析依赖和集中化现象。

Abstract

DNS (domain name system) services in the IPv6 environment experienced rapid development. Research on methods for discovering DNS services in an IPv6 environment was of paramount importance in order to analyze the global developmental trends of DNS services in IPv6 and enhance their reliability. Based on the cooperative resolution relationship between IPv4 and IPv6

associating IPv6 DNS services through inter-stack services was an effective approach. However

existing methods for discovering IPv6 DNS services based on inter-stack service association were limited by the length of DNS probe packets. In response to this issue

a novel approach was proposed for discovering IPv6 DNS services based on dynamic domain name watermarks. By constructing dynamic domain name resource records using self-established authoritative servers

the limitations imposed by probe packet length were circumvented. Comparative analysis indicated that the number of discovered IPv6 DNS services using this method increased by nearly 98% compared to traditional methods. Moreover

through the analysis of watermark logs

a plethora of resolver dependencies and centralization phenomena were identified.

关键词

Keywords

references

CUI T , XIONG G , GOU G , et al . 6VECLM: language modeling in vector space for IPv6 target generation [C ] // Proceedings of the Machine Learning and Knowledge Discovery in Databases: Applied Data Science Track: European Conference . Berlin : Springer , 2021 : 192 - 207 .

CUI T , GOU G , XIONG G , et al . 6GAN: IPv6 multi-pattern target generation via generative adversarial nets with reinforcement learning [C ] // Proceedings of the IEEE INFOCOM 2021-IEEE Conference on Computer Communications . Piscataway ： IEEE Press , 2021 : 1 - 10 .

LIU Z , XIONG Y , LIU X , et al . 6Tree: efficient dynamic discovery of active addresses in the IPv6 address space [J ] . Computer Networks , 2019 , 155 : 31 - 46 .

YANG T , HOU B , CAI Z , et al . 6Graph: a graph-theoretic approach to address pattern mining for internet-wide IPv6 scanning [J ] . Computer Networks , 2022 , 203 : 108666 .

BERGER A , WEAVER N , BEVERLY R , et al . Internet nameserver IPv4 and IPv6 address relationships [C ] // IMC ’13: Proceedings of the 2013 Internet Measurement Conference . New York : Association for Computing Machinery , 2013 : 91 - 104 .

DURAND A , IHREN J . DNS IPv6 transport operational guidelines [R ] . 2004 .

FIEBIG T , BORGOLTE K , HAO S , et al . Something from nothing (there): collecting global IPv6 datasets from DNS [C ] // Proceedings of the Passive and Active Measurement: 18th International Conference . Berlin : Springer , 2017 : 30 - 43 .

BAGNULO M , SULLIVAN A , MATTHEWS P , et al . DNS64: DNS extensions for network address translation from IPv6 clients to IPv4 servers [R ] . 2011 .

AL-DALKY R , SCHOMP K . Characterization of collaborative resolution in recursive dns resolvers [C ] // Proceedings of the Passive and Active Measurement: 19th International Conference , Berlin : Springer , 2018 : 146 - 157 .

MO D , ZHU Y , JIE Z , et al . Unveiling flawed cache structures in dns infrastructure via record watermarking [C ] // GLOBECOM 2023-2023 IEEE Global Communications Conference . Piscataway ： IEEE Press , 2023 : 6024 - 6029 .

MOURA G C M , CASTRO S , HARDAKER W , et al . Clouding up the internet: how centralized is DNS traffic becoming? [C ] // Proceedings of the ACM Internet Measurement Conference . 2020 : 42 - 49 .

XU C , ZHANG Y , SHI F , et al . Measuring the centrality of DNS infrastructure in the wild [J ] . Applied Sciences , 2023 , 13 ( 9 ): 5739 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

DNS异常检测：大规模实验分析

递归-权威侧部署加密DNS协议的隐私收益评估方法及测量分析

基于无证书签名的抗DNS中间人攻击方案

DNSSEC自动化部署相关问题分析

互联网名址体系安全保障技术及其应用分析