On March 27, 2012, the “National Domain Name Security Alliance” (hereinafter referred to as the ”Alliance”) guided by the Bureau of Communications Security of the Ministry of Industry and Information Technology and sponsored by the National Domain Name Security Center was officially established in Beijing. 28 organizations from domestic registry and registrars became the first members of the Alliance. The Alliance would by integrating all the chains of the whole domain name industry and forming a linkage mechanism of prevention and emergency treatment for domain name resolution security, improve the security of national domain names. CNNIC would assume the responsibility of Secretariat of the Alliance. At the founding ceremony, Secretariat provided DNS (Domain Name System) anti-attack devices for the first group of the Alliance members.
As an important infrastructure of Internet, DNS is directly related to the security and stability of Internet. According to monitoring data of CNNIC, currently 57% of the domain name resolution services in our country are at risk, and large-scale domain name attacks from outside occur frequently, which severely threaten the steadiness of DNS. The security risks of domain names are mainly derived from the bulkiness of DNS and the diversity of domain name attack techniques. With the opening of Internet of Things, the integration of telecom, radio and TV, and the opening up of new top level domains, the scale of domain names further expands, posing a great challenge to the security work of domain names.
At the ceremony, Mr. Jingguang FU, Deputy Director of the Internet Security Administration Division of the Communications Security Bureau of the Ministry of Industry and Information Technology, pointed out that DNS is such a complicated system that no organization can complete it individually, so collaboration of the whole DNS is necessary.
The Alliance Secretariat announced the constitution of the Alliancein the meeting. According to the constitution, the Alliance will primarily conduct work in the following three aspects in the future:
1) in domain name operation: carry out information sharing with respect to security and operation analysis data of DNS, security and early warning information of DNS and security status of domain name industry, and provide the Alliance members with services of DNS operation analysis and security monitoring to uplift the Alliance members’ prevention and discovery abilities in DNS security incidents;
2) in domain name application: conduct the detection of domain name application, and enhance the Alliance members’ overall understanding of their respective domain name application;
3) in emergency treatment: set up emergency coordination and handling mechanism for domain name security within the Alliance, promote the establishment of emergency backup platform, and provide the Alliance members with emergency support and backup services for their DNS.
Besides, the Alliance will also carry out consultation in domain name security among the members, and thus improve its members’ level of DNS construction, operation and security protection.
The Alliance for the first time formed the linkage mechanism of security guarantee for our country code top-level domain name .CN and .中国, aiming to strengthen the Alliance members’ communication and cooperation in national domain name system security, share related information of DNS security, organize the Alliance members to collaboratively prevent, discover, and handle DNS security incidents, so as to lift the overall level of DNS security.
