More than half of China’s 740,000 domain name servers are insecure

At the same time as the rapid development of the domestic Internet, more and more serious security issues have not been taken seriously. In particular, the key domain name servers are not as robust as we thought. Tencent Technology cited a report by the Beijing Commercial Daily that there are currently approximately 740,000 domain name servers in China, of which more than half have security risks. Moreover, although domain name registration is cheap, the corresponding security cannot be guaranteed.

Internet security is divided into three layers, including hardware protection at the operator level, domain name protection for providing access services, and website content protection at the enterprise level. However, most companies often neglect the intermediate domain name protection work.

Recently, the highly-regarded global IPv6 summit meeting was held in Beijing. The participating experts stated that with the depletion of IPv4 addresses and the advent of a new era of IPv6, various applications based on the Internet will become more complicated and larger, while being safe and reliable. The basic Internet resources such as IP and domain names will be particularly important.

“Half of the 740,000 domain name servers in China have security risks, and 100 yuan can register domain names, but they can't buy domain names safely.” Chairman Mao Wei of CNNIC (China Internet Network Information Center) introduced.

Mao Wei said in an exclusive interview with reporters that secure domain names are the central nervous system for the stable operation of the network. Due to the lack of comprehensive and professional security services, more than 50% of domain name servers in China are relatively insecure, while 57% of China's important information systems have domain names. Analyze risk. With the transition from IPv4 to IPv6, the importance, complexity, and risk factor of domain name services are also increasing. The existing domain name service system in China is also generally lack of safe operation technology and service guarantee. Therefore, the establishment and deployment of professional domain name equipment and domain name security operation and maintenance services are essential for Internet security and enterprises that rely on IT systems.

According to report, China currently has 740,000 domain name servers, but the security of domain names cannot be ignored. Most companies simply hand over the domain name security service to a domain name agent when they register a domain name. Even companies that build their own domain name servers do not have access to professional domain name security services.

In the current Internet environment, domain name attacks frequently occur. On March 19 of this year, the failure of Huaxia Mingwang.com caused an abnormality in all domain names registered and used by Huaxia Mingwang. As soon as the Spring Festival in February was over, telecommunication operators The failure of the domain name area has led to the phenomenon that websites with varying degrees of disconnection and slow network speeds occur across the country. In the case of the more serious Baidu domain name hijacking last year, the website could not be accessed within hours and direct losses amounted to more than 7 million. yuan.

In response to the domain name attack incident, Mao Wei pointed out that the basic reason is that many provinces and cities in China lack the perfect mechanism for the deployment of domain name servers, including various links in the industry chain of telecom operators, domain name service providers, and enterprises and institutions. Many problems with recursive services and ordinary client-level authoritative domain name services have become a very weak link in the entire domain name service, and have also become the hardest-hit areas where domain name attacks occur frequently.

Some experts suggested that in order to ensure the security of China's Internet services, it is necessary to increase investment in technology industrialization from the national level, starting with domain name software development, domain name special equipment, and domain name safe operation and maintenance commercial services, and building the next generation of trusted domain names based on IPv6. The system is the best means to protect China’s Internet security and corporate network security.

It is reported that China Netcom, which is committed to providing comprehensive solutions for domain name commercial services, has drafted China's latest domain security standards and launched a set of domain names containing software, hardware, and services based on 13 years of experience in domain name industry operations management and technology research. The overall solution for safe operation and maintenance is fully compatible with IPv6 networks. "We have started cooperation with the Ministry of Industry and Information Technology and other departments to improve the security of domain names and protect emergency response mechanisms," Mao Wei revealed.