{"id":6421,"date":"2024-01-13T10:16:30","date_gmt":"2024-01-13T01:31:30","guid":{"rendered":"https:\/\/www.inforsec.org\/wp\/?p=6421"},"modified":"2024-01-13T10:18:15","modified_gmt":"2024-01-13T01:33:15","slug":"%e3%80%90ccs-2023-%e6%9d%b0%e5%87%ba%e8%ae%ba%e6%96%87%e5%a5%96%e3%80%91%e6%b2%89%e9%bb%98%e4%b8%8d%e6%98%af%e9%87%91%ef%bc%9a%e4%b8%80%e7%a7%8d%e7%a0%b4%e5%9d%8f%e6%9d%83%e5%a8%81%e5%9f%9f%e5%90%8d","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=6421","title":{"rendered":"\u3010CCS 2023 \u6770\u51fa\u8bba\u6587\u5956\u3011\u6c89\u9ed8\u4e0d\u662f\u91d1\uff1a\u4e00\u79cd\u7834\u574f\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u7684\u653b\u51fb"},"content":{"rendered":"\n

\u201c\u6c89\u9ed8\u662f\u91d1\u201d\u662f\u53e4\u4eca\u4e2d\u5916\u4e3a\u4eba\u5904\u4e8b\u7684\u91cd\u8981\u6cd5\u5219\u4e4b\u4e00\u3002\u897f\u65b9\u8c1a\u8bed\u201cspeech is silver, silence is golden\u201d\u8d77\u6e90\u4e8e\u963f\u62c9\u4f2f\u6587\u5316\uff0c\u65e9\u5728 9 \u4e16\u7eaa\u5c31\u4e3a\u4eba\u4f20\u8bf5\uff1b\u6211\u56fd\u53e4\u4ee3\u300a\u8bba\u8bed\u00b7\u4e3a\u653f\u300b\u4e2d\u4e5f\u6709\u201c\u591a\u95fb\u9619\u7591\uff0c\u614e\u8a00\u5176\u4f59\uff0c\u5219\u5be1\u5c24\u201d\u7684\u7c7b\u4f3c\u8868\u8ff0\u3002\u7136\u800c\uff0c\u5728\u7f51\u7edc\u5b89\u5168\u9886\u57df\uff0c\u8fd9\u53e5\u8bdd\u8fd8\u6b63\u786e\u5417\uff1f\u672c\u6587\u4ecb\u7ecd\u7684\u8fd9\u9879\u7814\u7a76\uff0c\u4e5f\u8bb8\u80fd\u4e3a\u8bfb\u8005\u5e26\u6765\u4e00\u4e9b\u601d\u8003\u3002<\/p>\n\n\n\n

\u672c\u6b21\u5206\u4eab\u7684\u8bba\u6587”Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers”\uff0c\u4e3b\u8981\u7531\u6e05\u534e\u5927\u5b66 NISL \u5b9e\u9a8c\u5ba4\u548c\u963f\u91cc\u4e91 DNS \u7684\u7814\u7a76\u56e2\u961f\u5171\u540c\u5b8c\u6210\uff0c\u8be5\u7814\u7a76\u62ab\u9732\u4e86\u4e00\u79cd\u7834\u574f\u4e91 DNS \u5e73\u53f0\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u8d1f\u8f7d\u5747\u8861\u7684\u653b\u51fb\u65b9\u5f0f\u3002\u8fd9\u79cd\u653b\u51fb\u5229\u7528\u4e86\u4e00\u4e9b\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u5bf9\u90e8\u5206 DNS \u67e5\u8be2 \u201c\u4fdd\u6301\u6c89\u9ed8\u201d\u7684\u54cd\u5e94\u7b56\u7565\uff0c\u6784\u9020\u9488\u5bf9\u7279\u5b9a\u57df\u540d\u7684\u67e5\u8be2\u6765\u5f71\u54cd\u4e3b\u6d41\u9012\u5f52 DNS \u8f6f\u4ef6\u8d1f\u8f7d\u5747\u8861\u7b97\u6cd5\u7684\u8fd0\u884c\u7ed3\u679c\uff0c\u8fbe\u5230\u63a7\u5236\u53d1\u5f80\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u8bbf\u95ee\u6d41\u91cf\u7684\u6548\u679c\u3002\u8be5\u653b\u51fb\u5f71\u54cd\u4e86 BIND9\u3001PowerDNS\u3001Microsoft DNS \u4e3b\u6d41\u9012\u5f52 DNS \u8f6f\u4ef6\u300122.24% \u7684\u6d41\u884c FQDN<\/a> \u57df\u540d\u548c 3.94% \u6d41\u884c TLD \u57df\u540d\u3001\u591a\u4e2a\u77e5\u540d\u4e91 DNS \u5e73\u53f0\u5382\u5546\u3002<\/p>\n\n\n\n

\u8be5\u8bba\u6587\u5728\u7f51\u7edc\u5b89\u5168\u9886\u57df\u9876\u7ea7\u4f1a\u8bae ACM CCS 2023 \u53d1\u8868\uff08\u5f55\u7528\u7387 19%\uff0c234\/1222\uff09\uff0c\u5e76\u83b7\u9009 ACM CCS 2023 \u5e74\u5ea6\u6770\u51fa\u8bba\u6587\u5956\uff08Distinguished Paper Award\uff09\u3002ACM CCS\u662f\u4e2d\u56fd\u8ba1\u7b97\u673a\u5b66\u4f1aCCF A\u7c7b\u7684\u9876\u7ea7\u56fd\u9645\u4f1a\u8bae\u3002<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

01 .\u7814\u7a76\u80cc\u666f<\/strong><\/h4>\n\n\n\n

\u57df\u540d\u7cfb\u7edf\uff08DNS\uff09\u662f\u4e92\u8054\u7f51\u4e2d\u91cd\u8981\u7684\u57fa\u7840\u8bbe\u65bd\u4e4b\u4e00\u3002\u5728\u57df\u540d\u9012\u5f52\u89e3\u6790\u6d41\u7a0b\u4e2d\uff0c\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u901a\u5e38\u8d1f\u8d23\u8fd4\u56de\u57df\u540d\u6700\u7ec8\u7684\u89e3\u6790\u7ed3\u679c\uff0c\u5176\u7a33\u5b9a\u6027\u548c\u5b89\u5168\u6027\u53d7\u5230\u4e1a\u754c\u91cd\u89c6\u3002\u4e3a\u4e86\u65b9\u4fbf\u7ba1\u7406\u57df\u540d\u3001\u63d0\u9ad8\u57df\u540d\u89e3\u6790\u7684\u9c81\u68d2\u6027\uff0c\u8d8a\u6765\u8d8a\u591a\u7684\u7f51\u7ad9\u548c\u5e94\u7528\u9009\u62e9\u91c7\u7528\u57df\u540d\u6258\u7ba1\u670d\u52a1\uff08DNS hosting service\uff09\uff0c\u4e00\u4e9b\u5927\u578b\u4f01\u4e1a\u6570\u5b57\u5316\u5e73\u53f0\u8fd8\u4f1a\u901a\u8fc7 API \u96c6\u6210\u4e91\u5e73\u53f0\u7684 DNS \u89e3\u6790\u670d\u52a1\uff0c\u5e2e\u52a9\u5176\u7ba1\u7406\u548c\u7ef4\u62a4\u4f01\u4e1a\u57df\u540d\u3002<\/p>\n\n\n\n

\u7136\u800c\uff0c\u57df\u540d\u6258\u7ba1\u670d\u52a1\u5f80\u5f80\u4e3a\u88ab\u6258\u7ba1\u57df\u540d\u5206\u914d\u540c\u4e00\u7ec4\u6743\u5a01\u670d\u52a1\u5668\u548c\u8d1f\u8f7d\u5747\u8861\u914d\u7f6e\uff0c\u5bfc\u81f4\u6743\u5a01\u670d\u52a1\u5668\u53ef\u7528\u6027\u95ee\u9898\u5f71\u54cd\u5176\u6258\u7ba1\u7684\u6240\u6709\u57df\u540d\u3002\u4e3e\u4f8b\u6765\u8bf4\uff1abilibili.com \u6258\u7ba1\u5728\u67d0\u4e00\u4e91 DNS \u5e73\u53f0\u3002\u5982\u56fe 1 \u6240\u793a\uff0c\u8be5\u5e73\u53f0\u4e3a bilibili.com \u5206\u914d\u4e86 16 \u4e2a\u6743\u5a01\u670d\u52a1\u5668\u5730\u5740\u3002\u5f53\u9012\u5f52\u670d\u52a1\u5668\u63a5\u6536\u5230\u5ba2\u6237\u7aef\u67e5\u8be2 bilibili.com \u7684\u8bf7\u6c42\u540e\uff0c\u5b83\u4f1a\u6309\u7167\u9009\u62e9\u7b97\u6cd5\u8bbf\u95ee 16 \u4e2a\u5019\u9009\u670d\u52a1\u5668\u4e2d\u7684\u67d0\u4e00\u4e2a\u670d\u52a1\u5668\u3002\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u8fd9\u4e9b\u6743\u5a01\u670d\u52a1\u5668\u8fd8\u6258\u7ba1\u7740\u5927\u91cf\u5176\u5b83\u57df\u540d\uff0c\u5176\u4e2d\u4e0d\u4e4f\u56fd\u5185\u5916\u77e5\u540d\u7684\u516c\u53f8\u3002\u5728\u8fd9\u79cd\u591a\u79df\u6237 DNS \u89e3\u6790\u73af\u5883\u4e0b\uff0c\u4e00\u65e6\u5176\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u5931\u6548\uff0c\u5927\u91cf\u6258\u7ba1\u57df\u540d\u7684\u89e3\u6790\u90fd\u5c06\u53d7\u5230\u6ce2\u53ca [1, 2]\u3002<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u56fe1 <\/strong>\u67d0\u4e91 DNS \u5e73\u53f0\u4e3a bilibili.com \u63d0\u4f9b\u7684\u6743\u5a01\u57df\u540d\u8d1f\u8f7d\u5747\u8861\u673a\u5236<\/strong><\/p>\n\n\n\n

\u7834\u574f\u57df\u540d\u6743\u5a01\u670d\u52a1\u5668\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u53ef\u9020\u6210\u4e00\u7cfb\u5217\u4e25\u91cd\u7684\u540e\u679c\u3002\u5176\u4e2d\u6700\u76f4\u89c2\u7684\u5f71\u54cd\u662f\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5c06\u89e3\u6790\u6d41\u91cf\u96c6\u4e2d\u5728\u67d0\u4e00\u4e2a\u8d1f\u8f7d\u5747\u8861\u8282\u70b9\uff0c\u5982\u524d\u9762\u4e91 DNS \u5e73\u53f0\u63d0\u4f9b\u7684 16 \u4e2a\u5019\u9009\u8282\u70b9\u4e2d\u7684\u4e00\u4e2a\uff0c\u5bf9\u5176\u9020\u6210\u4e25\u91cd\u7684\u89e3\u6790\u6d41\u91cf\u8d1f\u8f7d\u3002\u4e0d\u540c\u4e8e\u7edd\u5927\u591a\u6570\u4f20\u7edf\u62d2\u7edd\u670d\u52a1\u653b\u51fb\uff0c\u7834\u574f\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u6240\u9020\u6210\u7684\u6d41\u91cf\u8d1f\u8f7d\u5747\u6765\u81ea\u6b63\u5e38\u7528\u6237\uff0c\u8fd9\u4f7f\u5f97\u4e00\u7cfb\u5217\u8fc7\u6ee4\u6076\u610f\u6d41\u91cf\u8d1f\u8f7d\u7684\u9632\u5fa1\u673a\u5236\u5931\u6548 [3] [4] [5]\u3002<\/p>\n\n\n\n

\u9664\u6b64\u4e4b\u5916\uff0c\u7834\u574f\u8d1f\u8f7d\u5747\u8861\u8fd8\u80fd\u6709\u6548\u589e\u52a0\u653b\u51fb\u8005\u5b9e\u65bd\u89e3\u6790\u8def\u5f84\u52ab\u6301\u548c DNS \u7f13\u5b58\u6c61\u67d3\u7684\u6210\u529f\u7387 [6]\u3002\u4e3e\u4f8b\u6765\u8bf4\uff0c\u653b\u51fb\u8005\u60f3\u7be1\u6539 bilibili.com \u7684\u89e3\u6790\u8bb0\u5f55\uff0c\u7531\u4e8e\u8d1f\u8f7d\u5747\u8861\u7b56\u7565\u4f7f\u5f97\u7528\u6237\u7684\u89e3\u6790\u6d41\u91cf\u5206\u914d\u5230 16 \u4e2a\u8282\u70b9\u4e2d\u7684\u4e00\u4e2a\uff0c\u4e3a\u4e86\u4fdd\u8bc1\u7528\u6237\u987a\u5229\u52ab\u6301\u7528\u6237\u62a5\u6587\uff0c\u653b\u51fb\u8005\u9700\u8981\u52ab\u6301\u66f4\u591a\u901a\u5f80\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9\u7684\u8def\u5f84\uff0c\u6216\u8fdb\u884c\u66f4\u591a\u89e3\u6790\u76ee\u6807\u7684\u731c\u89e3\u4ee5\u6784\u9020\u6b63\u786e\u7684\u54cd\u5e94\u62a5\u6587\u3002\u7136\u800c\uff0c\u4e00\u65e6\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u906d\u5230\u7834\u574f\uff0c\u6240\u6709\u7528\u6237\u7684\u89e3\u6790\u6d41\u91cf\u90fd\u96c6\u4e2d\u5728\u5c11\u91cf\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9\u4e0a\uff0c\u653b\u51fb\u8005\u6240\u9700\u8981\u52ab\u6301\u7684\u8def\u5f84\u548c\u731c\u89e3\u7684\u76ee\u6807\u6570\u90fd\u4f1a\u5927\u5927\u51cf\u5c11\uff0c\u5927\u5e45\u964d\u4f4e\u4e86\u653b\u51fb\u6210\u672c\u3002<\/p>\n\n\n\n

02 .\u653b\u51fb\u539f\u7406<\/strong><\/h4>\n\n\n\n

\u672c\u6587\u63ed\u9732\u7684\u653b\u51fb\u65b9\u5f0f\uff0c\u540c\u65f6\u5229\u7528\u4e86\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u4e00\u79cd\u5e7f\u6cdb\u7684\u914d\u7f6e\u7279\u6027\uff0c\u4ee5\u53ca\u9012\u5f52\u89e3\u6790\u8f6f\u4ef6\u67e5\u8be2\u7b56\u7565\u7684\u4e00\u79cd\u4e3b\u6d41\u5b9e\u73b0\uff0c\u8fbe\u5230\u7834\u574f\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u7684\u76ee\u7684\u3002\u5bf9\u4e8e\u53d7\u5bb3\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\uff0c\u4e00\u79cd\u6d41\u884c\u7684\u54cd\u5e94\u7b56\u7565\u662f\uff1a\u5b83\u4eec\u5728\u63a5\u53d7\u5230\u4e0d\u5c5e\u4e8e\u5b83\u4eec\u6258\u7ba1\u7684\u57df\u540d\u67e5\u8be2\u65f6\uff0c\u4e0d\u4ea7\u751f\u4efb\u4f55\u5e94\u7b54\uff08\u201c\u6c89\u9ed8\u662f\u91d1\u201d\uff09\uff0c\u7528\u4e8e\u9632\u8303 DoS \u653b\u51fb\u3002<\/p>\n\n\n\n

\u4e3e\u4f8b\u6765\u8bf4\uff0cno-hosted.com \u4e0d\u6258\u7ba1\u5728\u67d0\u4e91 DNS \u5e73\u53f0\u7684\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u4e0a\uff0c\u5f53\u4e91 DNS \u5e73\u53f0\u7684\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u63a5\u53d7\u5230\u67e5\u8be2 no-hosted.com \u7684\u89e3\u6790\u8bf7\u6c42\u65f6\uff0c\u5b83\u5c31\u4f1a\u76f4\u63a5\u5ffd\u7565\uff0c\u4e0d\u8fd4\u56de\u4efb\u4f55\u54cd\u5e94\u3002\u8fd9\u672c\u662f\u4e00\u79cd\u7b80\u5355\u3001\u9ad8\u6548\u7684\u9632\u5fa1\u62d2\u7edd\u670d\u52a1\u653b\u51fb\u7684\u65b9\u6cd5\u3002\u56e0\u4e3a\u5bf9\u4e8e\u653b\u51fb\u8005\u6765\u8bf4\uff0c\u5982\u679c\u60f3\u8981\u5229\u7528\u8fd9\u4e9b\u6743\u5a01\u670d\u52a1\u5668\u53d1\u8d77\u53cd\u5c04\u653e\u5927\u653b\u51fb\uff0c\u4e3a\u4e86\u4ea7\u751f\u8db3\u591f\u5927\u7684\u54cd\u5e94\u62a5\u6587\uff08\u800c\u4e0d\u662f\u4ea7\u751f NXDOMAIN \u7b49\u54cd\u5e94\uff09\uff0c\u5fc5\u987b\u5148\u83b7\u5f97\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u4e0a\u6258\u7ba1\u7684\u67d0\u4e2a\u57df\u540d\u3002\u5f53\u7ef4\u62a4\u8005\u91c7\u53d6\u201c\u6c89\u9ed8\u662f\u91d1\u201d\u7684\u54cd\u5e94\u7b56\u7565\u540e\uff0c\u5373\u4f7f\u653b\u51fb\u8005\u53ef\u4ee5\u4f2a\u9020\u6e90\u5730\u5740\u5411\u6743\u5a01\u670d\u52a1\u5668\u53d1\u8d77\u89e3\u6790\u8bf7\u6c42\uff0c\u7531\u4e8e\u653b\u51fb\u8005\u96be\u4ee5\u5f97\u77e5\u6743\u5a01\u670d\u52a1\u5668\u6258\u7ba1\u7684\u5177\u4f53\u57df\u540d\uff0c\u4f7f\u5f97\u6743\u5a01\u670d\u52a1\u5668\u201c\u6c89\u9ed8\u4ee5\u5bf9\u201d\uff0c\u4e0d\u4ea7\u751f\u4efb\u4f55\u653e\u5927\u6d41\u91cf\u3002<\/p>\n\n\n\n

\u7136\u800c\u672c\u6587\u7684\u7814\u7a76\u8868\u660e\uff0c\u8fd9\u79cd\u201c\u6c89\u9ed8\u662f\u91d1\u201d\u7684\u5e94\u7b54\u7b56\u7565\uff0c\u53cd\u800c\u7ed9\u4e88\u653b\u51fb\u8005\u7834\u574f\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u7684\u5951\u673a\u3002\u8fd9\u662f\u56e0\u4e3a\u5bf9\u4e8e\u4e3b\u6d41\u9012\u5f52\u89e3\u6790\u8f6f\u4ef6\uff08\u5982 BIND9\u7b49\uff09\uff0c\u5b83\u4eec\u5728\u9009\u53d6\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u65f6\uff0c\u4f1a\u4f18\u5148\u9009\u53d6\u54cd\u5e94\u65f6\u5ef6\u6700\u5c0f\u7684\u5019\u9009\u670d\u52a1\u5668\uff0c\u5e76\u60e9\u7f5a\u54cd\u5e94\u8d85\u65f6\u7684\u5019\u9009\u670d\u52a1\u5668\u3002\u66f4\u7cdf\u7cd5\u7684\u662f\uff0c\u8fd9\u79cd\u4f18\u9009\u7b56\u7565\u7684\u8bb0\u5f55\u673a\u5236\u662f\u5bf9\u6240\u6709\u6258\u7ba1\u57df\u540d\u5168\u5c40\u751f\u6548\u7684\u3002\u4ee5\u56fe 1 \u4e3e\u4f8b\uff0c\u5047\u8bbe\u8fd9 16 \u4e2a\u5019\u9009\u8282\u70b9\u540c\u65f6\u6258\u7ba1 bilibili.com \u548c\u653b\u51fb\u8005\u7684\u57df\u540d attack.com\uff0c\u5047\u8bbe\u4e00\u4e2a\u9012\u5f52\u89e3\u6790\u5668\u53d1\u73b0\u5728\u89e3\u6790 attack.com \u65f6\uff0c16 \u4e2a\u5019\u9009\u8282\u70b9\u4e2d\u7684 15 \u4e2a\u8282\u70b9\u65e0\u6cd5\u54cd\u5e94\uff0c\u90a3\u4e48\u5b83\u5c31\u4f1a\u5728\u63a5\u4e0b\u6765\u4e00\u6bb5\u65f6\u95f4\u5185\uff0c\u907f\u514d\u4f7f\u7528\u8fd9 15 \u4e2a\u8282\u70b9\uff0c\u65e0\u8bba\u7528\u6237\u67e5\u8be2\u7684\u662f attack.com\uff0c\u8fd8\u662f bilibili.com\u3002<\/p>\n\n\n\n

\u57fa\u4e8e\u4ee5\u4e0a\u4e24\u79cd\u7279\u6027\uff0c\u672c\u6587\u63ed\u9732\u4e86\u4e00\u79cd\u7834\u574f\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u7684\u653b\u51fb\u65b9\u5f0f\uff0c\u5176\u6d41\u7a0b\u5982\u56fe 2 \u6240\u793a\uff1a\u5047\u8bbe\u4e00\u7ec4\u53d7\u5bb3\u6258\u7ba1\u57df\u540d\uff08hosted domains\uff09\u88ab\u6258\u7ba1\u5728\u4e00\u7ec4\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9 IP1 – IP4 \u4e0a\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u914d\u7f6e\u4ed6\u7684\u57df\u540d attack.com \uff0c\u5c06\u5176\u6743\u5a01\u670d\u52a1\u5668\u6307\u5411 IP2 – IP4\u3002\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0cattack.com \u5e76\u6ca1\u6709\u771f\u6b63\u88ab\u6258\u7ba1\u5230 IP2 – IP4 \u4e0a\uff0c\u653b\u51fb\u8005\u53ea\u662f\u8bbe\u7f6e\u76f8\u5e94\u7684 NS \u8bb0\u5f55\u3002\u5f53\u653b\u51fb\u8005\u5411\u9012\u5f52\u89e3\u6790\u5668\u53d1\u8d77 attack.com \u57df\u540d\u89e3\u6790\u8bf7\u6c42\u65f6\uff0c\u9012\u5f52\u89e3\u6790\u5668\u6839\u636e attack.com \u7684\u914d\u7f6e\uff0c\u5411 IP2 – IP4 \u53d1\u8d77 attack.com \u57df\u540d\u89e3\u6790\u8bf7\u6c42\u3002\u7531\u4e8e attack.com \u6ca1\u6709\u6258\u7ba1\u5728 IP2 – IP4\uff0cIP2 – IP4 \u91c7\u53d6\u201c\u6c89\u9ed8\u662f\u91d1\u201d\u7684\u7b56\u7565\uff0c\u4e0d\u54cd\u5e94\u9012\u5f52\u89e3\u6790\u5668\u7684\u8bf7\u6c42\uff0c\u5bfc\u81f4\u9012\u5f52\u89e3\u6790\u5668\u60e9\u7f5a\u8fd9 3 \u4e2a\u5019\u9009\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9\u3002\u5f53\u6b63\u5e38\u7528\u6237\u5411\u9012\u5f52\u89e3\u6790\u5668\u67e5\u8be2\u53d7\u5bb3\u6258\u7ba1\u57df\u540d\u65f6\uff0c\u7531\u4e8e IP2 – IP4 \u53d7\u5230\u60e9\u7f5a\uff0c\u4f18\u5148\u7ea7\u4e0b\u964d\uff0c\u9012\u5f52\u89e3\u6790\u5668\u5c06\u6240\u6709\u7684\u89e3\u6790\u6d41\u91cf\u53d1\u9001\u81f3 IP1\uff0c\u4ece\u800c\u8fbe\u5230\u4e86\u653b\u51fb\u8005\u7834\u574f\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u7684\u76ee\u7684\u3002\u8be5\u653b\u51fb\u6839\u636e\u653b\u51fb\u76ee\u6807\u7c92\u5ea6\uff0c\u53ef\u4ee5\u884d\u751f\u51fa\u4e24\u4e2a\u53d8\u79cd\uff1a\u5206\u522b\u4ee5NS\u8bb0\u5f55\u4e3a\u76ee\u6807\u3001\u4ee5IP\u5730\u5740\u4e3a\u76ee\u6807\u8fdb\u884c\u653b\u51fb\u3002<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u56fe2 \u653b\u51fb\u6d41\u7a0b<\/strong><\/p>\n\n\n\n

03 .\u5f71\u54cd\u8bc4\u4f30<\/strong><\/h4>\n\n\n\n

\u672c\u6587\u901a\u8fc7\u5bf9\u4e3b\u6d41DNS\u9012\u5f52\u8f6f\u4ef6\u7684\u5206\u6790\uff0c\u8bc4\u4f30\u653b\u51fb\u7684\u6548\u679c\u3002\u4f5c\u8005\u9009\u53d6\u4e86\u4e94\u6b3e\u4e3b\u6d41DNS\u9012\u5f52\u8f6f\u4ef6\uff08BIND9\u3001Unbound\u3001PowerDNS\u3001Knot \u548c Microsoft DNS\uff09\u8fdb\u884c\u5206\u6790\u3002\u5bf9\u4e8e\u524d\u56db\u6b3e\u8f6f\u4ef6\uff0c\u4f5c\u8005\u901a\u8fc7\u5bf9\u5b83\u4eec\u6e90\u4ee3\u7801\u7684\u9759\u6001\u5206\u6790\u3001\u4ee5\u53ca\u8f6f\u4ef6\u8fd0\u884c\u8fc7\u7a0b\u4e2d\u7684\u52a8\u6001\u8c03\u8bd5\uff0c\u786e\u8ba4\u4e86\u5f71\u54cd\u653b\u51fb\u7684\u56db\u79cd\u56e0\u7d20\uff1a\u653b\u51fb\u8005\u53d1\u9001\u7684\u67e5\u8be2\u6570\u3001\u53d7\u5bb3\u6743\u5a01\u670d\u52a1\u5668\u7684\u5ef6\u8fdf\u3001\u7528\u6237\u67e5\u8be2\u7684\u5206\u5e03\u548c\u653b\u51fb\u7c92\u5ea6\uff08\u5373\u9488\u5bf9 NS \u7c92\u5ea6\uff0c\u6216 IP \u5730\u5740\u7c92\u5ea6\uff09\u3002\u63a5\u4e0b\u6765\uff0c\u4f5c\u8005\u901a\u8fc7\u642d\u5efa\u6a21\u62df\u73af\u5883\uff0c\u63a2\u7a76\u5728\u56db\u79cd\u56e0\u7d20\u7684\u5f71\u54cd\u4e0b\u653b\u51fb\u6548\u679c\u7684\u53d8\u5316\uff0c\u6700\u7ec8\u53d1\u73b0\u4e94\u6b3e\u8f6f\u4ef6\u4e2d\u6709\u4e09\u6b3e\u53d7\u5230\u672c\u653b\u51fb\u7684\u5f71\u54cd \uff08BIND 9\u3001PowerDNS\u3001Microsoft DNS\uff09\uff0c\u800c\u4ee5\u5f80\u7814\u7a76\u8868\u660e\u5b83\u4eec\u7684\u5e02\u573a\u5360\u6709\u7387\u8d85\u8fc7 65.9% [7]\u3002\u66f4\u7cdf\u7cd5\u7684\u662f\uff0c\u653b\u51fb\u8005\u8fd8\u80fd\u4ee5\u6781\u5c0f\u7684\u4ee3\u4ef7\uff0c\u5f15\u5bfc\u5927\u91cf\u6765\u81ea\u6b63\u5e38\u7528\u6237\u7684\u67e5\u8be2\u6d41\u91cf\u3002\u5982\u56fe 3 \u6240\u793a\uff0c\u653b\u51fb\u8005\u4ec5\u9700\u53d1\u9001\u4e00\u4e2a\u67e5\u8be2\u8bf7\u6c42\uff0cBIND 9 \u5e73\u5747\u800c\u8a00\u5c31\u80fd\u5411\u5355\u4e00\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9\u8fde\u7eed\u8f6c\u53d1 5730 \u4e2a\u6b63\u5e38\u8bf7\u6c42\uff0c\u800c\u4e0d\u662f\u5c06\u67e5\u8be2\u5e73\u644a\u5230\u6240\u6709\u7684\u8d1f\u8f7d\u5747\u8861\u8282\u70b9\u3002<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u56fe3 <\/strong>\u6a21\u62df\u73af\u5883\u4e0b\uff0cBIND 9 \u5728\u63a5\u6536\u5230\u6307\u5b9a\u6b21\u6570\u7684\u653b\u51fb\u67e5\u8be2\u540e\uff08X\u8f74\uff09\uff0c\u8fde\u7eed\u5411\u76ee\u6807\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9\u8f6c\u53d1\u7684\u67e5\u8be2\u6b21\u6570\uff08Y\u8f74\uff09<\/strong><\/p>\n\n\n\n

\u672c\u6587\u8fd8\u901a\u8fc7\u5927\u89c4\u6a21\u6d4b\u91cf\uff0c\u8bc4\u4f30\u672c\u653b\u51fb\u5bf9\u73b0\u7f51\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u3001\u516c\u5171\u9012\u5f52\u89e3\u6790\u5668\uff08\u4e92\u8054\u7f51\u4e8b\u5b9e\u4e0a\u63d0\u4f9b\u9012\u5f52\u89e3\u6790\u670d\u52a1\u7684\u89e3\u6790\u5668\uff09\u4ee5\u53ca\u5927\u578b\u9012\u5f52\u516c\u5171\u670d\u52a1 \uff08\u7531\u5927\u578b\u5382\u5546\u7ef4\u62a4\uff0c\u516c\u5f00\u63d0\u4f9b\u670d\u52a1\u7684\u89e3\u6790\u5668\uff09\u7684\u5f71\u54cd\u8303\u56f4\u3002\u672c\u6587\u7684\u6d4b\u91cf\u5b9e\u9a8c\u5f00\u59cb\u4e8e 2022 \u5e74 5 \u6708\u3002\u4f5c\u8005\u9009\u53d6\u4e86 SecRank top 1M FQDN (Fully Qualified Domain Name) [8] \u548c Tranco top 1M SLD (Second Level Domain) [9] \u6d41\u884c\u57df\u540d\u4f5c\u4e3a\u6d4b\u8bd5\u76ee\u6807\u3002\u4f5c\u8005\u5bf9\u5b83\u4eec\u7684\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u8fdb\u884c\u6d4b\u91cf\uff0c\u4e3b\u8981\u53d1\u73b0\u5982\u4e0b\uff1a<\/p>\n\n\n\n

\u25a0 \u5171 22.24% \u7684 SecRank FQDN \u6d41\u884c\u57df\u540d\u30013.94% \u7684 Tranco SLD \u6d41\u884c\u57df\u540d\u4f1a\u53d7\u5230\u672c\u653b\u51fb\u5f71\u54cd\u3002<\/p>\n\n\n\n

\u25a0 \u53d7\u5f71\u54cd\u7684\u57df\u540d\u670d\u52a1\u5305\u62ec\u667a\u80fd\u624b\u673a\u64cd\u4f5c\u7cfb\u7edf API \uff08FQDN \u7684\u6392\u540d\u4e3a 2\u30019\uff09\uff0c\u77ed\u89c6\u9891\u5e94\u7528 \uff0826 \u4e2a\u6392\u540d\u524d 100 \u7684 FQDN\uff09\uff0c\u7535\u5b50\u5546\u52a1\u670d\u52a1\uff08FQDN \u7684\u6392\u540d\u4e3a 50\u300154\uff09\uff0c\u533b\u7597\u670d\u52a1\uff08FQDN \u7684\u6392\u540d\u4e3a 190\u3001191\uff09\u7b49\u3002<\/p>\n\n\n\n

\u25a0 \u591a\u4e2a\u77e5\u540d\u4e91 DNS \u5382\u5546\u53d7\u5230\u672c\u653b\u51fb\u7684\u5f71\u54cd\uff0c\u5176\u4e2d\u4e00\u4e2a\u6700\u5927\u7684\u5382\u5546\u751a\u81f3\u6258\u7ba1\u4e86 6.26% \u7684 SecRank top 1M FQDN \u548c 0.81% \u7684Tranco top 1M SLD \u6d41\u884c\u57df\u540d\u3002<\/p>\n\n\n\n

\u25a0 \u653b\u51fb\u8005\u7834\u574f\u8d1f\u8f7d\u5747\u8861\u540e\uff0c\u5bfc\u81f4\u7684\u53d7\u5bb3\u8d1f\u8f7d\u5747\u8861\u8282\u70b9\u63a5\u6536\u5230\u7684\u6d41\u91cf\u4e3a\u6b63\u5e38\u60c5\u51b5\u4e0b\u7684 6.84 \u500d\uff0c\u6700\u5927\u53ef\u8fbe 46 \u500d\u3002<\/p>\n\n\n\n

\u4f5c\u8005\u8fd8\u5bf9\u7f51\u7edc\u4e0a\u7684\u516c\u5171\u9012\u5f52\u89e3\u6790\u5668\u8fdb\u884c\u4e86\u6d4b\u8bd5\uff0c\u4e3b\u8981\u53d1\u73b0\u5982\u4e0b\uff1a<\/p>\n\n\n\n

\u25a0 \u5bf9\u5168\u7f51 37843 \u4e2a\u7a33\u5b9a\u8fd0\u884c\u8d85\u8fc7\u534a\u5e74\u7684\u516c\u5171\u9012\u5f52\u89e3\u6790\u5668\u7684\u6d4b\u8bd5\u53d1\u73b0\uff0c\u5176\u4e2d 37.88% \u7684\u516c\u5171\u9012\u5f52\u89e3\u6790\u5668\u53ef\u53d7\u5230\u672c\u653b\u51fb\u7684\u5f71\u54cd\uff0c\u5176\u5206\u5e03\u8303\u56f4\u5982\u56fe 4 \u6240\u793a\u3002<\/p>\n\n\n\n

\u25a0 \u5bf9 14 \u4e2a\u77e5\u540d\u516c\u5171\u9012\u5f52\u670d\u52a1\u63d0\u4f9b\u5546\u5171 100 \u4e2a IP \u5730\u5740\u7684\u6d4b\u8bd5\u53d1\u73b0\uff0c\u5176\u4e2d 10 \u4e2a\u5382\u5546\u7684 45 \u4e2a IP \u5730\u5740\u53d7\u5230\u672c\u653b\u51fb\u5f71\u54cd\uff0c\u5176\u4e2d\u4e0d\u4e4f\u77e5\u540d\u7684\u516c\u5171\u9012\u5f52\u670d\u52a1\u63d0\u4f9b\u5546\u3002<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u56fe4  \u53d7\u5f71\u54cd\u7684\u516c\u5171\u9012\u5f52\u89e3\u6790\u5668\u7684\u5168\u7403\u5206\u5e03\u70ed\u529b\u56fe<\/strong><\/p>\n\n\n\n

04 .\u7f13\u89e3\u63aa\u65bd<\/strong><\/h4>\n\n\n\n

\u4e3a\u4e86\u7f13\u89e3\u8fd9\u79cd\u653b\u51fb\u9020\u6210\u7684\u5f71\u54cd\uff0c\u672c\u6587\u8be5\u8bba\u6587\u5728\u7f51\u7edc\u5b89\u5168\u9886\u57df\u9876\u7ea7\u4f1a\u8bae ACM CCS 2023 \u53d1\u8868\uff08\u5f55\u7528\u7387 19%\uff0c234\/1222\uff09\uff0c\u5e76\u83b7\u9009ACM CCS 2023 \u5e74\u5ea6\u6770\u51fa\u8bba\u6587\u5956\u3002ACM CCS\u662f\u4e2d\u56fd\u8ba1\u7b97\u673a\u5b66\u4f1aCCF A\u7c7b\u7684\u9876\u7ea7\u56fd\u9645\u4f1a\u8bae\u3002\u4e3a\u6743\u5a01\u670d\u52a1\u7aef\u548c\u9012\u5f52\u89e3\u6790\u7aef\u63d0\u51fa\u4e86\u76f8\u5e94\u7684\u89e3\u51b3\u5efa\u8bae\uff1a<\/p>\n\n\n\n

01<\/strong>\u6743\u5a01\u670d\u52a1\u7aef\uff1a\u5bf9\u5e94\u4e0d\u5c5e\u4e8e\u81ea\u5df1\u6258\u7ba1\u7684\u57df\u540d\uff0c\u4ea7\u751f\u4e00\u4e2a\u5e26 EDNS0 \u6269\u5c55\uff08Code 20: Not Authoritative\uff09\u7684\u9519\u8bef\u54cd\u5e94 REFUSED\uff1b\u82e5\u4e0d\u652f\u6301 EDNS0\uff0c\u5219\u8fd4\u56de REFUSED\u3002\u8fd9\u79cd\u62a5\u6587\u4e0d\u4f1a\u5f71\u54cd\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9\u7684\u89e3\u6790\u4f18\u5148\u7ea7\uff0c\u4f7f\u672c\u653b\u51fb\u5931\u6548\u3002\u540c\u65f6\uff0c\u5728\u906d\u53d7\u53cd\u5c04\u653e\u5927\u653b\u51fb\u65f6\uff0c\u8fd9\u79cd\u54cd\u5e94\u4e0d\u4f1a\u4ea7\u751f\u6bd4\u653b\u51fb\u8005\u66f4\u591a\u7684\u54cd\u5e94\u62a5\u6587\u3002<\/p>\n\n\n\n

02<\/strong>\u9012\u5f52\u89e3\u6790\u7aef\uff1a\u5efa\u8bae\u53c2\u8003 Knot resolver \u7684\u5b9e\u73b0\uff0c\u4ee5\u4e00\u5b9a\u7684\u6982\u7387\u5c1d\u8bd5\u4f4e\u4f18\u5148\u7ea7\u7684\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9\uff0c\u5f53\u5176\u6210\u529f\u54cd\u5e94\u540e\uff0c\u7acb\u5373\u6062\u590d\u5176\u89e3\u6790\u4f18\u5148\u7ea7\uff0c\u4f7f\u672c\u653b\u51fb\u65e0\u6cd5\u5f71\u54cd\u6743\u5a01\u670d\u52a1\u5668\u8282\u70b9\u4f18\u5148\u7ea7\u3002<\/p>\n\n\n\n

05 .\u7ed3\u8bba<\/strong><\/h4>\n\n\n\n

\u672c\u6587\u63ed\u9732\u4e86\u4e00\u79cd\u5168\u65b0\u7684\u653b\u51fb\u65b9\u6cd5\uff0c\u7528\u4ee5\u7834\u574f\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u7684\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u3002\u4f5c\u8005\u53d1\u73b0\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u4e00\u79cd\u5e38\u89c1\u7684\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u7684\u54cd\u5e94\u7b56\u7565\uff08\u201c\u6c89\u9ed8\u662f\u91d1\u201d\uff09\uff0c\u914d\u5408\u4e3b\u6d41\u9012\u5f52DNS\u8f6f\u4ef6\u7684\u9009\u62e9\u7b97\u6cd5\u5b9e\u73b0\uff0c\u5bf9\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u7684\u8d1f\u8f7d\u5747\u8861\u673a\u5236\u8fdb\u884c\u9690\u79d8\u3001\u9ad8\u6548\u7684\u7834\u574f\u3002\u4f5c\u8005\u901a\u8fc7\u4e00\u7cfb\u5217\u7684\u5206\u6790\u548c\u5b9e\u9a8c\uff0c\u8bc1\u5b9e\u4e86\u8fd9\u79cd\u653b\u51fb\u662f\u73b0\u5b9e\u53ef\u884c\u548c\u9ad8\u6548\u7684\uff0c\u5927\u91cf\u6d41\u884c\u57df\u540d\u3001\u57df\u540d\u6258\u7ba1\u670d\u52a1\u5546\u4ee5\u53ca\u516c\u5171DNS\u89e3\u6790\u5668\u90fd\u53ef\u4ee5\u6210\u4e3a\u53d7\u5bb3\u8005\u3002\u201c\u6c89\u9ed8\u662f\u91d1\u201d\u8fd9\u4e2a\u5904\u4e8b\u6cd5\u5219\u662f\u5426\u662f\u91d1\u79d1\u7389\u5f8b\u8fd8\u6709\u5f85\u4e8e\u8ba8\u8bba\uff0c\u4f46\u81f3\u5c11\u5bf9\u6743\u5a01\u57df\u540d\u670d\u52a1\u5668\u6765\u8bf4\uff0c\u8fd9\u5e76\u4e0d\u662f\u4e00\u4e2a\u597d\u7684\u7b56\u7565\u3002<\/p>\n\n\n\n

\u8be6\u60c5\u8bf7\u53c2\u9605\u8bba\u6587\u539f\u6587\uff1a<\/p>\n\n\n\n

https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3576915.3616647<\/p>\n\n\n\n

\u53c2\u8003\u6587\u732e<\/strong><\/p>\n\n\n\n

[1] Aqsa Kashaf, Vyas Sekar, and Yuvraj Agarwal. 2020. Analyzing Third Party Service Dependencies in Modern Web Services: Have We Learned from the Mirai-Dyn Incident?. In Proceedings of the ACM Internet Measurement Conference (Virtual Event, USA) (IMC \u201920). Association for Computing Machinery, New York, NY, USA, 634\u2013647. https:\/\/doi.org\/10.1145\/3419394.3423664<\/p>\n\n\n\n

[2] Giovane C. M. Moura, Sebastian Castro, Wes Hardaker, Maarten Wullink, and Cristian Hesselman. 2020. Clouding up the Internet: How Centralized is DNS Traffic Becoming?. In Proceedings of the ACM Internet Measurement Conference (Virtual Event, USA) (IMC \u201920). Association for Computing Machinery, New York, NY, USA, 42\u201349. https:\/\/doi.org\/10.1145\/3419394.3423625<\/p>\n\n\n\n

[3]   Brij B Gupta and Omkar P Badve. 2017. Taxonomy of DoS and DDoS attacks and desirable defense mechanism in a cloud computing environment. Neural Computing and Applications 28, 12 (2017), 3655\u20133682.<\/p>\n\n\n\n

[4]  Jelena Mirkovic and Peter Reiher. 2004. A Taxonomy of DDoS Attack and DDoS Defense Mechanisms. SIGCOMM Comput. Commun. Rev. 34, 2 (apr 2004), 39\u201353. https:\/\/doi.org\/10.1145\/997150.997156<\/p>\n\n\n\n

[5]  Saman Taghavi Zargar, James Joshi, and David Tipper. 2013. A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks. IEEE Communications Surveys & Tutorials 15, 4 (2013), 2046\u20132069. https:\/\/doi.org\/10.1109\/SURV.2013.031413.00127<\/p>\n\n\n\n

[6]  Tianxiang Dai, Haya Shulman, and Michael Waidner. 2021. Let\u2019s Downgrade Let\u2019s Encrypt. In Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security (Virtual Event, Republic of Korea) (CCS \u201921). Association for Computing Machinery, New York, NY, USA, 1421\u20131440. https:\/\/doi.org\/10.1145\/3460120.3484815<\/p>\n\n\n\n

[7]  Marc K\u00fchrer, Thomas Hupperich, Jonas Bushart, Christian Rossow, and Thorsten Holz. 2015. Going Wild: Large-Scale Classification of Open DNS Resolvers. In Proceedings of the 2015 Internet Measurement Conference (Tokyo, Japan) (IMC \u201915). Association for Computing Machinery, New York, NY, USA, 355\u2013368. https:\/\/doi.org\/10.1145\/2815675.2815683<\/p>\n\n\n\n

[8]  Qinge Xie, Shujun Tang, Xiaofeng Zheng, Qingran Lin, Baojun Liu, Haixin Duan, and Frank Li. 2023. Building an Open, Robust, and Stable Voting-Based Domain Top List. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 625\u2013642. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/xie<\/p>\n\n\n\n

[9]  Victor Le Pochat, Tom Van Goethem, Samaneh Tajalizadehkhoob, Maciej Korczy\u0144ski, and Wouter Joosen. 2019. Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation. In Proceedings of the 26th Annual Network and Distributed System Security Symposium (NDSS 2019). https:\/\/doi.org\/10.14722\/ndss.2019.23386
<\/p>\n","protected":false},"excerpt":{"rendered":"

\u201c\u6c89\u9ed8\u662f\u91d1\u201d\u662f\u53e4\u4eca\u4e2d\u5916\u4e3a\u4eba\u5904\u4e8b\u7684\u91cd\u8981\u6cd5\u5219\u4e4b\u4e00\u3002\u897f\u65b9\u8c1a\u8bed\u201cspeech is silver, sile… Continue reading → <\/span><\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-6421","post","type-post","status-publish","format-standard","hentry","category-research"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/6421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6421"}],"version-history":[{"count":3,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/6421\/revisions"}],"predecessor-version":[{"id":6431,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/6421\/revisions\/6431"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6421"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}