IP フラグメンテーション攻撃と DNS flag day 2020 / fragmentation attack and flag day 2020

Transcript

1. ͜΍Ͷ
   !YLPZBOF *1
   ϑϥάϝϯςʔγϣϯ߈ܸͱ
   %/4
   GMBH
   EBZ
    %/4
   Թઘ
   
   ൪֎ฤ
   JO
   େࡕ
2. ൃදͷྲྀΕ ͸͡Ίʹ w %/4
   qBH
   EBZ
   
   ͱ͸
   w *1
   ϑϥάϝϯςʔγϣϯ߈ܸ
   w qBH
   EBZ
   
   ΁ͷରԠঢ়گ
   w 4"%
   %/4
   ͱͷൺֱ
   w ·ͱΊ 
3. %/4
   GMBH
   EBZ
   
   ରԠ͠·͔ͨ͠
4. ͦ΋ͦ΋
   %/4
   GMBH
   EBZ
   
   ͱ͸
5. %/4
   GMBH
   EBZ
    ͸͡Ίʹ w ओʹ
   *1
   ϑϥάϝϯςʔγϣϯ͕Ҿ͖ى͜͢໰୊΁ͷରԠࡦͷ ద༻
   w ೔࣌
   
   ೥
   
   ݄
   
   ೔
   w ಺༰
    &%/4
   CV⒎FS
   TJ[F
   ͷ࡟ݮ
   
   όΠτ
    5$1
   ΁ͷରԠ  ެࣜαΠτ
   IUUQTEOTqBHEBZOFUJOEFYKBIUNM
6. *1
   ϑϥάϝϯςʔγϣϯ͕
 Ҿ͖ى͜͢໰୊
   㲈
   *1
   ϑϥάϝϯςʔγϣϯ߈ܸ
7. ֓ཁ *1
   ϑϥάϝϯςʔγϣϯ߈ܸ w ΩϟογϡϙΠζχϯά߈ܸͷͻͱͭ
    )FS[CFSH
   4IVMNBO
   ͕
   
   ೥ʹ࿦จൃද
   <>
   w ϑϥάϝϯτͨ͠
   %/4
   Ԡ౴ͷҰ෦Λࠩ͠ସ͑
    ୈҰϑϥάϝϯτศ৐߈ܸ΍ΞΠίϥ߈ܸͱΑ͹ΕΔ͜ͱ΋
   w ࣮ࡍͷܦ࿏
   .56
   ΑΓখ͍͞αΠζͰ΋߈ܸՄೳ
    3*1&
   Ͱ
   )MBWBDFL
   ͕ൃද
   <>
   w ϙʔτϥϯμϚΠζͳͲͷैདྷͷରࡦ͕ແޮ  <>
   IUUQTBSYJWPSHBCT
   <>
   IUUQTVDTCJVBDJMdIFS[CFBTFDVSJUZGSBHQEG
   <>
   IUUQTJFFFYQMPSFJFFFPSHEPDVNFOU
   <>
   IUUQTSJQFSJQFOFUQSFTFOUBUJPOTJQGSBHBUUBDLQEG
8. Πϝʔδ *1
   ϑϥάϝϯςʔγϣϯ߈ܸ  ୈ
   
   ϑϥάϝϯτ
   *1
   ϔομ
   6%1
   ϔομ
   %/4
   ϝοηʔδͷҰ෦ ਖ਼نͷୈ
   
   ϑϥάϝϯτ
   *1
   ϔομ
   %/4
   ϝοηʔδͷ࢒Γ ୈ
   
   ϑϥάϝϯτ ِ૷ͨ͠ୈ
   
   ϑϥάϝϯτ
   *1
   ϔομ
   %/4
   ϝοηʔδͷ࢒Γ ਖ਼نͷݖҖαʔό͕ૹ৴͢Δύέοτ ߈ܸऀ͕ૹ৴͢Δύέοτ ߈ܸऀ͸ૹ৴͠ͳ͍
   ਖ਼نͷԠ౴Λͦͷ··࢖༻ ผͷ಺༰ʹॻ͖׵͑ͨύέοτΛૹ৴ ِ૷ͨ͠ϑϥάϝϯτͱ ϦΞηϯϒϧِͤͯ͞ͷ Ԡ౴Λੜ੒
9. ߈ܸͷྫ *1
   ϑϥάϝϯςʔγϣϯ߈ܸ  ਖ਼نͷԠ౴ ِ૷ͨ͠Ԡ౴ ;; ADDITIONAL SECTION: ns1.nodnssec.exp. 86400 IN A 192.168.11.7 ns2.nodnssec.exp. 86400 IN A 192.168.11.8 ;; ADDITIONAL SECTION: ns1.nodnssec.exp. 86400 IN A 192.168.13.1 ns2.nodnssec.exp. 85389 IN A 192.168.13.1
10. ߈ܸखॱ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  Ϧκϧό ݖҖαʔό ߈ܸऀ ᶃِ૷ͨ͠
    ୈϑϥάϝϯτΛૹ৴ ᶄ໊લղܾཁٻ ᶅඇ࠶ؼ໰͍߹Θͤ ᶆୈϑϥάϝϯτΛૹ৴ ᶇୈϑϥάϝϯτΛૹ৴ ߈ܸ੒ޭͷ৔߹ɺᶇ͸ ϦΞηϯϒϧ͞Εͳ͍ ᶃͷύέοτͱ*1*%͕Ұக ͢Δ৔߹͸߈ܸ੒ޭ
    ᶃͱᶆ͕ϦΞηϯϒϧ
11. λʔήοτ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w %/4
    PWFS
    6%1
    PWFS
    *1W
    w ݪཧతʹ͸
    *1W
    5$1
    Ͱ΋Մೳ
     Ͱ΋͋·ΓૂΘΕͳ͍
    ཧ༝͸ޙड़ 
12. ؔ܎͢Δϓϩτίϧɾػೳ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  6%1
    DIFDLTVN %/4
    %/44&$
    &%/4 *1
    BEESFTT
    *EFOUJpDBUJPO
    qBHT
    P⒎TFU *$.1
    1BUI
    .56
    %JTDPWFSZ
13. ؔ܎͢Δϓϩτίϧɾػೳ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  6%1
    DIFDLTVN %/4
    %/44&$
    &%/4 *1
    BEESFTT
    *EFOUJpDBUJPO
    qBHT
    P⒎TFU *$.1
    1BUI
    .56
    %JTDPWFSZ
14. %/44&$ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  $ dig chukyo-u.ac.jp @a.dns.jp +dnssec (snip) ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;chukyo-u.ac.jp. IN A ;; AUTHORITY SECTION: chukyo-u.ac.jp. 86400 IN NS ns2.dc.ctc.ad.jp. chukyo-u.ac.jp. 86400 IN NS ns1.hs.ctc.jp. VJOG7GHBNE2GMJQ72U7J8DJBR9ECELQM.jp. 900 IN NSEC3 1 1 5 45EC942BAF VK94EPKGG2VSRBNU7V334S7O652C3M9K TXT RRSIG VJOG7GHBNE2GMJQ72U7J8DJBR9ECELQM.jp. 900 IN RRSIG NSEC3 8 2 900 20210111174503 20201212174503 18321 jp. tm6tSRCyhQyX0DiG25WVBDMIOtQ/QFC2tw0w1zTiBnvhfCfAhm0Rx8jk FDiRJonL/IDnPkJ7/ cE67fiuX0z8zcetIxlsjyOqn6HPzPjl2yb8JuLP SW5vvswZ0FDF09/6ZhmD1E/K6bu4BQW3nIuiqt8EF5K0JVVNA/XvS9a+ /cs= 9KH0DHR7PFV2TKURF2493MN2THE8GAPR.jp. 900 IN NSEC3 1 1 5 45EC942BAF 9KTFU2AI6RE43JIMPB56SAA33GIFG075 TXT RRSIG 9KH0DHR7PFV2TKURF2493MN2THE8GAPR.jp. 900 IN RRSIG NSEC3 8 2 900 20210111174503 20201212174503 18321 jp. jUqxDzJVq9VxqfKpOWCLNkhX/8CkuB1XkKp0GTzJHRmjk2oVs0ffkHEt 0nuLS9bMkfcg3NWC26r0j0DbKxx2P6pIlOFxjfI00h2/ OyCYR6C388R+ FUiOT4UX9w+LjktmLnz6Cb2bkw8nHaxIjKGEn7oELcfF0wCWqJQEsxq+ 0PE= ;; ADDITIONAL SECTION: ns2.dc.ctc.ad.jp. 86400 IN A 218.216.176.115 (snip) ;; MSG SIZE rcvd: 604 %0
    Ϗοτ͕Φϯʹͳ͍ͬͯΔͱ ॺ໊ݕূ͍ͯ͠ͳͯ͘΋
    334*(
    /4&$ 
    ϨίʔυͳͲ͕͍ͭͨ Ԡ౴͕ฦͬͯ͘Δ
15. &%/4 *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  $ dig chukyo-u.ac.jp @a.dns.jp +dnssec (snip) ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;chukyo-u.ac.jp. IN A ;; AUTHORITY SECTION: chukyo-u.ac.jp. 86400 IN NS ns2.dc.ctc.ad.jp. chukyo-u.ac.jp. 86400 IN NS ns1.hs.ctc.jp. VJOG7GHBNE2GMJQ72U7J8DJBR9ECELQM.jp. 900 IN NSEC3 1 1 5 45EC942BAF VK94EPKGG2VSRBNU7V334S7O652C3M9K TXT RRSIG VJOG7GHBNE2GMJQ72U7J8DJBR9ECELQM.jp. 900 IN RRSIG NSEC3 8 2 900 20210111174503 20201212174503 18321 jp. tm6tSRCyhQyX0DiG25WVBDMIOtQ/QFC2tw0w1zTiBnvhfCfAhm0Rx8jk FDiRJonL/IDnPkJ7/ cE67fiuX0z8zcetIxlsjyOqn6HPzPjl2yb8JuLP SW5vvswZ0FDF09/6ZhmD1E/K6bu4BQW3nIuiqt8EF5K0JVVNA/XvS9a+ /cs= 9KH0DHR7PFV2TKURF2493MN2THE8GAPR.jp. 900 IN NSEC3 1 1 5 45EC942BAF 9KTFU2AI6RE43JIMPB56SAA33GIFG075 TXT RRSIG 9KH0DHR7PFV2TKURF2493MN2THE8GAPR.jp. 900 IN RRSIG NSEC3 8 2 900 20210111174503 20201212174503 18321 jp. jUqxDzJVq9VxqfKpOWCLNkhX/8CkuB1XkKp0GTzJHRmjk2oVs0ffkHEt 0nuLS9bMkfcg3NWC26r0j0DbKxx2P6pIlOFxjfI00h2/ OyCYR6C388R+ FUiOT4UX9w+LjktmLnz6Cb2bkw8nHaxIjKGEn7oELcfF0wCWqJQEsxq+ 0PE= ;; ADDITIONAL SECTION: ns2.dc.ctc.ad.jp. 86400 IN A 218.216.176.115 (snip) ;; MSG SIZE rcvd: 604 w %/4
    ͷ֦ு
    3'$
    
    w *1W
    %/44&$
    Ͱ͸ରԠඞਢ
    w 6%1
    Ͱ΋
    
    όΠτΛ௒͑Δ Ԡ౴ΛॲཧͰ͖Δ
     ࠷େ
    
    όΠτ
16. %/44&$
    
    &%/4
    ͷӨڹ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  $ dig chukyo-u.ac.jp @a.dns.jp +dnssec (snip) ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;chukyo-u.ac.jp. IN A ;; AUTHORITY SECTION: chukyo-u.ac.jp. 86400 IN NS ns2.dc.ctc.ad.jp. chukyo-u.ac.jp. 86400 IN NS ns1.hs.ctc.jp. VJOG7GHBNE2GMJQ72U7J8DJBR9ECELQM.jp. 900 IN NSEC3 1 1 5 45EC942BAF VK94EPKGG2VSRBNU7V334S7O652C3M9K TXT RRSIG VJOG7GHBNE2GMJQ72U7J8DJBR9ECELQM.jp. 900 IN RRSIG NSEC3 8 2 900 20210111174503 20201212174503 18321 jp. tm6tSRCyhQyX0DiG25WVBDMIOtQ/QFC2tw0w1zTiBnvhfCfAhm0Rx8jk FDiRJonL/IDnPkJ7/ cE67fiuX0z8zcetIxlsjyOqn6HPzPjl2yb8JuLP SW5vvswZ0FDF09/6ZhmD1E/K6bu4BQW3nIuiqt8EF5K0JVVNA/XvS9a+ /cs= 9KH0DHR7PFV2TKURF2493MN2THE8GAPR.jp. 900 IN NSEC3 1 1 5 45EC942BAF 9KTFU2AI6RE43JIMPB56SAA33GIFG075 TXT RRSIG 9KH0DHR7PFV2TKURF2493MN2THE8GAPR.jp. 900 IN RRSIG NSEC3 8 2 900 20210111174503 20201212174503 18321 jp. jUqxDzJVq9VxqfKpOWCLNkhX/8CkuB1XkKp0GTzJHRmjk2oVs0ffkHEt 0nuLS9bMkfcg3NWC26r0j0DbKxx2P6pIlOFxjfI00h2/ OyCYR6C388R+ FUiOT4UX9w+LjktmLnz6Cb2bkw8nHaxIjKGEn7oELcfF0wCWqJQEsxq+ 0PE= ;; ADDITIONAL SECTION: ns2.dc.ctc.ad.jp. 86400 IN A 218.216.176.115 (snip) ;; MSG SIZE rcvd: 604 w Ԡ౴͕ϑϥάϝϯτ͢ΔཁҼʹ
     6%1
    Ͱॲཧ͢ΔԠ౴αΠζ͕ େ͖͘ͳΔ
     ॺ໊ݕূ͠ͳ͍ͳΒ
    334*(
    /4&$ 
    ͳͲ͸ෆཁ
    ‣ Ԡ౴αΠζ͕૿͑Δ͚ͩ
    ‣ ʹ΋ؔΘΒͣ
    %0
    ϏοτΛΦϑ ʹͰ͖ͳ͍࣮૷͕͋Δ
    6OCPVOE
    ͱ͔ ॺ໊ݕূ͠ͳ͍ͳΒෆཁ
17. ؔ܎͢Δϓϩτίϧɾػೳ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  6%1
    DIFDLTVN %/4
    %/44&$
    &%/4 *1
    BEESFTT
    *EFOUJpDBUJPO
    qBHT
    P⒎TFU *$.1
    1BUI
    .56
    %JTDPWFSZ
18. w 6%1
    ٖࣅϔομɺ6%1
    ϔομɺϖΠϩʔυ͔Βܭࢉ
     ߈ܸऀ͸͜ͷ஋ΛҰகͤ͞ͳ͍ͱ͍͚ͳ͍ TPVSDF
    BEESFTT EFTUJOBUJPO
    BEESFTT [FSP QSPUPDPM 6%1
    MFOHUI TPVSDF
    QPSU EFTUJOBUJPO
    QPSU -FOHUI $IFDLTVN QBZMPBE 6%1
    νΣοΫαϜ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  6%1
    ٖࣅϔομ 6%1
    ϔομ
19. 6%1
    νΣοΫαϜ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w ܭࢉํ๏
    
    ͷิ਺࿨ͷ
    
    ͷิ਺  ྫ
    03 64 6e 73 c0 0c 03 64 6e 73 c0 0c 01 31 e3 31 e4 ᶃ 
    όΠτͣͭՃࢉ ᶄ ্ܻ͕ΓΛ࠷ԼҐʹՃࢉ 01 31 e3 ᶅ 
    ͷิ਺ΛٻΊΔ
    ൱ఆ ce 1b ^ 31 e4 νΣοΫαϜ
20. 6%1
    νΣοΫαϜͷِ૷ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w νΣοΫαϜ͸ຖճมԽ
    w Ԡ౴಺༰ͱϑϥάϝϯτҐஔ͕ҰఆͳΒɺ
    ൪໨Ҏ߱ͷ ϖΠϩʔυ͸ෆม
    w ϑϥάϝϯτ͝ͱʹิ਺࿨ͷܭࢉ͕Ұக͢Ε͹Α͍
    w ߈ܸऀ͸ࣄલʹԠ౴Λ༻ҙͯ͠
 νΣοΫαϜ͕Ұக͢ΔΑ͏ʹ
 ِ૷Ͱ͖Δ 
    
    
    ͳΒ͹
    
    
    
    ͷิ਺࿨ Csum = Csum1 + Csum2 Csum′ = Csum1 + Csum′ 2 Csum2 = Csum′ 2 Csum = Csum′ Csum :
21. 6%1
    νΣοΫαϜͷِ૷ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  2 όΠτͣͭՃࢉͨ͠߹ܭ஋: 0x22f5f3 2 όΠτͣͭՃࢉͨ͠߹ܭ஋: 0x3f612 1 ͷิ਺࿨: 0xf615 1 ͷิ਺࿨: 0xf615 ਖ਼نԠ౴ͷྫ ِ૷Ԡ౴ͷྫ
22. ؔ܎͢Δϓϩτίϧɾػೳ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  6%1
    DIFDLTVN %/4
    %/44&$
    &%/4 *1
    BEESFTT
    *EFOUJpDBUJPO
    qBHT
    P⒎TFU *$.1
    1BUI
    .56
    %JTDPWFSZ
23. w ܦ࿏্ͷ
    .56
    Λ୳ࡧͯ͠ૹ৴ݩͰϑϥάϝϯτ
     ܦ࿏్தͰͷϑϥάϝϯςʔγϣϯΛ཈੍
     *1W
    Ͱ͸ΤϯυϊʔυͰϑϥάϝϯτͤ͞Δ 1BUI
    .56
    %JTDPWFSZ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ     ᶃ
    MFO
    
    
    X%'
    qBH ᶄ
    *$.1
    UZQF
    DPEF
    .56
     ᶅ
    
    GSBHNFOUFE
    QBDLFUT
24. 1BUI
    .56
    4QPPGJOH *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w ֎෦͔Βِ૷
    *$.1
    ύέοτΛૹ৴
     ϑϥάϝϯτΛ༠ൃ
    w *1W
    ʹ͓͚ΔӨڹ
     -JOVY
    ͋Γ
    ,FSOFM
    
    Ͱ֬ೝ
     'SFF#4%
    
    ͳ͠  ߈ܸऀ Ϧκϧό ݖҖαʔό 
    ૹ৴ݩΛϦκϧό ʹِ૷ͨ͠ΫΤϦΛ ૹ৴ 
    Ϩεϙϯε 
    ِ૷
    *$.1
    ύέοτͷૹ৴
25. ؔ܎͢Δϓϩτίϧɾػೳ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ  6%1
    DIFDLTVN %/4
    %/44&$
    &%/4 *1
    BEESFTT
    *EFOUJpDBUJPO
    qBHT
    P⒎TFU *$.1
    1BUI
    .56
    %JTDPWFSZ
26. *1
    ϔομ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w ΞυϨεɺϑϥάɺΦϑηοτͳͲΛҰகͤ͞Δ  7FSTJPO *)- 5ZQF
    PG
    4FSWJDF 5PUBM
    -FOHUI *EFOUJpDBUJPO  % ' . ' 'SBHNFOU
    0⒎TFU 5JNF
    UP
    -JWF 1SPUPDPM )FBEFS
    $IFDLTVN 4PVSDF
    "EESFTT %FTUJOBUJPO
    "EESFTT 0QUJPOT 1BEEJOH *1W
    ϔομ
27. *1
    *EFOUJGJDBUJPO *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w *1W
    
    Ϗοτ
    w ߈ܸऀ͸༧ଌ͢Δඞཁ͕͋Δ  7FSTJPO *)- 5ZQF
    PG
    4FSWJDF 5PUBM
    -FOHUI *EFOUJpDBUJPO  % ' . ' 'SBHNFOU
    0⒎TFU 5JNF
    UP
    -JWF 1SPUPDPM )FBEFS
    $IFDLTVN 4PVSDF
    "EESFTT %FTUJOBUJPO
    "EESFTT 0QUJPOT 1BEEJOH
28. *1
    *EFOUJGJDBUJPO *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w ͜ͷ஋͚ͩ༧ଌ͢Ε͹Α͍
    w ߈ܸͷΤϯτϩϐʔ͕
    
    Ϗοτʹ௿Լ  7FSTJPO *)- 5ZQF
    PG
    4FSWJDF 5PUBM
    -FOHUI *EFOUJpDBUJPO  % ' . ' 'SBHNFOU
    0⒎TFU 5JNF
    UP
    -JWF 1SPUPDPM )FBEFS
    $IFDLTVN 4PVSDF
    "EESFTT %FTUJOBUJPO
    "EESFTT 0QUJPOT 1BEEJOH *1W
    ϔομ
29. ϑϥάϝϯτύέοτͷѻ͍ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w ͢΂ͯͷϑϥάϝϯτΛड৴͢Δ·ͰҰఆ࣌ؒόοϑΝϦϯά
     -JOVY
    σϑΥϧτͰ
    
    ඵ
    w ड৴ॱং͸ؔ܎ͳ͍
     ઌʹୈ
    
    ϑϥάϝϯτΛड৴ͯ͠΋Α͍
    w όοϑΝαΠζʹ͸্ݶ͋Γ
     -JOVY
    σϑΥϧτͰ
    
    ύέοτ
    ‎߈ܸऀ͕ઌʹِ૷ϑϥάϝϯτΛόοϑΝ্ݶ·Ͱૹ৴Ͱ͖Δ 
30. ͜͜·Ͱͷ·ͱΊ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w %/44&$
    &%/4
    ͕Ԡ౴αΠζ૿ՃͷཁҼ
    w 6%1
    νΣοΫαϜ͸ِ૷Ͱ͖Δ
    w 1BUI
    .56
    TQPPpOH
    Ͱ
    .56
    ΑΓখ͍͞αΠζͰͷϑϥά ϝϯτΛ༠ൃ
    w ߈ܸऀ͸ઌճΓͯ͠߈ܸͰ͖Δ
    w *1
    *EFOUJpDBUJPO
    ͚ͩ͸༧ଌ͢Δඞཁ͕͋Δ 
31. *1W
    ΍
    5$1
    ͷ৔߹͸ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w *1W
    *1
    *EFOUJpDBUJPO
    ͕
    
    Ϗοτ
     ैདྷͷ߈ܸͱൺֱͯ͠Τϯτϩϐʔͷ͕ࠩͳ͍
    ‣ 6%1
    ιʔεϙʔτ
    
    Ϗοτ
    ͱτϥϯβΫγϣϯ
    *%
    
    Ϗοτ
    ͷ ߹ܭͱಉ͡
    w 5$1
    1BUI
    .56
    TQPPpOH
    ͢ΔͱϑϥάϝϯτͰ͸ͳ͘ ηάϝϯςʔγϣϯ͢Δ
     
    ൪໨Ҏ߱ͷύέοτʹ΋
    5$1
    ϔομ͕ೖΔ 
32. ΞλοΫϕΫλ
33. .56
    ͱϑϥάϝϯτҐஔ ΞλοΫϕΫλ w .56
    *1W
    ͸
    
    όΠτҎ্
     -JOVY
    *1W
    1BUI
    .56
    ࠷খ஋͸
    
    όΠτ
    w 1.56
    TQPPpOH
    Ͱ͸
    6%1
    ϔομͷҐஔ͔Β
    
    όΠτ୯Ґ ͰϑϥάϝϯτҐஔͷௐ੔͕Մೳ
     1BUI
    .56
    ͕
    
    όΠτͳΒ
    
    όΠτͷύέοτ͕ૹ৴
    ‎ROBNF
    Ͱඍௐ੔ 
34. ϑϥάϝϯτύέοτͷِ૷ ΞλοΫϕΫλ w ιʔεϙʔτ΍
    %/4
    )FBEFS
    2VFTUJPO
    ηΫγϣϯ͸࠷ॳͷ ϑϥάϝϯτʹ͋Δ
     ߟྀ͠ͳͯ͘Α͍͕มߋ΋Ͱ͖ͳ͍
     ֤ηΫγϣϯͷ
    33
    ਺΋Ұகͤ͞ͳ͍ͱ͍͚ͳ͍
    w ߈ܸʹ࢖͏Ԡ౴಺༰Λߟྀ͠ͳ͍ͱ͍͚ͳ͍ 
35. ߈ܸྫ ΞλοΫϕΫλ w ҕৡԠ౴ͷࠩ͠ସ͑
    w TJCMJOH
    EPNBJO
    ͷ
    HMVF
    Ϩίʔυͷࠩ͠ସ͑
    w ൱ఆԠ౴ͷࠩ͠ସ͑
    w ͦͷଞ
     ϫΠϧυΧʔυΛૂ͏
     Θ͟ͱϦΞηϯϒϧΛࣦഊͤ͞Δ
    %P4 
36. ҕৡԠ౴ͷࠩ͠ସ͑ ΞλοΫϕΫλ w ॺ໊κʔϯ͔Βະॺ໊κʔϯ΁ͷҕৡԠ౴Λ߈ܸ
     ॺ໊ݕূ༗ޮ࣌Ͱ΋߈ܸՄೳͳέʔε΋
    ‣ /4&$
    0QU0VU
    ͕༗ޮͳκʔϯͷ
    0QU0VU
    ۠ؒ΁ͷҕৡ
    ‣ ॺ໊πʔϧʹґଘ
    w ର৅κʔϯ͕Ωϟογϡʹଘࡏ͠ͳ͍৔߹ʹ༗ޮ
    w େྔͷ
    /4
    Λ࣋ͭ৔߹΍
    /4
    ͷϥϕϧ͕௕͍৔߹͸ΑΓةݥ
     /4&$
    
    334*(
    ͕ͳͯ͘΋ϑϥάϝϯτͤ͞ΒΕΔՄೳੑ 
37. ҕৡԠ౴ͷࠩ͠ସ͑ ΞλοΫϕΫλ  ࠩ͠ସ͑ର৅ͷϨίʔυ ਖ਼نԠ౴ ِ૷Ԡ౴ 55-ʹΑΔ
    νΣοΫαϜͷௐ੔ *1ΞυϨεͷஔ͖͔͑
38. TJCMJOH
    EPNBJO
    ͷ
    HMVF
    Ϩίʔυͷࠩ͠ସ͑ ΞλοΫϕΫλ w ߈ܸऀࣗ਎͕υϝΠϯ໊Λ༻ҙ
     TJCMJOH
    EPNBJO
    ͷ
    /4
    ʹҕৡ ͍ͯ͠ΔΑ͏ʹΈ͔͚ͤ
     "EEJUJPOBM
    ηΫγϣϯͷ
 "
    
    """"
    ϨίʔυΛِ૷
    w ِ૷ର৅ͷϨίʔυ͕͢Ͱʹ
 Ωϟογϡ͞Ε͍ͯΔ৔߹ʹ
 ্ॻ͖Մೳ͔Ͳ͏͔͸࣮૷ґଘ  TJCMJOH
    EPNBJO
    ͷ
    /4
    Ϩίʔυ ஔ͖׵͑ର৅ͷϨίʔυ
39. ൱ఆԠ౴ͷࠩ͠ସ͑ ΞλοΫϕΫλ w ϝδϟʔͳ
    044
    ࣮૷͸ରࡦࡁΈ
     #*/%
    ,OPU
    3FTPMWFS
    ͸Өڹͳ͠
    #*/%
    1
    ,OPU
    3FTPMWFS
    
    Ͱ֬ೝ
     6OCPVOE
    
    <>
    1PXFS%/4
    3FDVSTPS
    
    <>
    Ͱमਖ਼ࡁΈ
    w ॺ໊κʔϯ΁
    %0
    ϏοτΛΦϯʹͯ͠໰͍߹ΘͤΔ৔߹Λ૝ఆ
    w Өڹ
     ॺ໊ະݕূ
    υϝΠϯϋΠδϟοΫ
     ॺ໊ݕূ࣌
    /4&$
    0QU0VU
    ۠ؒ΁αϒυϝΠϯΠϯδΣΫγϣϯͰ͖ΔՄೳੑ
    w ࿈ଓ߈ܸ͕Մೳ  <>
    IUUQTXXXOMOFUMBCTOMOFXT%FDVOCPVOESFMFBTFE
    <>
    IUUQTHJUIVCDPN1PXFS%/4QEOTQVMM
40. ൱ఆԠ౴ͷࠩ͠ସ͑ ΞλοΫϕΫλ w ҎԼʹج͍ͮͨ߈ܸ
     3'$
    
    ͷ
    SBOLJOH
    EBUB
     3'$
    
    ͷ൱ఆԠ౴ͷྫ  ݖҖ͋ΔԠ౴ͷ
    "OTXFS
    ηΫγϣϯʹؚ·ΕΔݖҖ͋Δσʔλ
    ݖҖ͋ΔԠ౴ͷ
    "VUIPSJUZ
    ηΫγϣϯʹؚ·ΕΔσʔλ
    ݖҖͷͳ͍Ԡ౴ͷ
    "OTXFS
    ηΫγϣϯͷσʔλ
    ݖҖ͋ΔԠ౴ͷ
    "OTXFS
    ηΫγϣϯʹؚ·ΕΔݖҖͷͳ͍σʔλ
    ݖҖ͋ΔԠ౴ͷ
    "EEJUJPOBM
    ηΫγϣϯͷσʔλ
    ݖҖͷͳ͍Ԡ౴ͷ
    "VUIPSJUZ
    ηΫγϣϯͷσʔλ
    ݖҖͷͳ͍Ԡ౴ͷ
    "EEJUJPOBM
    ηΫγϣϯͷσʔλ ৴པ౓ ߴ ௿ 3'$
    
    SBOLJOH
    EBUB
41. ൱ఆԠ౴ͷࠩ͠ସ͑ ΞλοΫϕΫλ w ҎԼʹج͍ͮͨ߈ܸ
     3'$
    
    ͷ
    SBOLJOH
    EBUB
     3'$
    
    ͷ൱ఆԠ౴ͷྫ 
    )FBEFS
    
    
    
    
    3%$0%&/9%0."*/
    2VFSZ
    
    
    
    
    "/&9".1-&
    "
    "OTXFS
    
    
    
    
    FNQUZ
    "VUIPSJUZ
    
    
    
    
    &9".1-&
    40"
    /499
    )045."45&3/499
    
    
    
    
    
    &9".1-&
    /4
    /499
    
    
    
    
    &9".1-&
    /4
    /499
    "EEJUJPOBM
    
    
    
    
    FNQUZ 3'$
    
    ͷ൱ఆԠ౴ͷྫΛࢀߟʹͨ͠දه ͜ΕΛ࠶ݱ 
    Ԡ౴ͷྫ͕ޡ͍ͬͯͨͷͰ
    3'$
    
    Λࢀߟʹͨ͠΋ͷʹमਖ਼͠·ͨ͠ɻ
    ͳ͓ɺ3'$
    
    ͷ
    /9%0."*/
    ͷྫͦͷ··Ͱ͸
    /4
    Ϩίʔυ͕֎෦໊ͱͳ͍ͬͯΔͨΊ༗ޮͳಟʹͳΓ·ͤΜɻ
42. ൱ఆԠ౴ͷࠩ͠ସ͑ ΞλοΫϕΫλ  ਖ਼نԠ౴ ࠩ͠ସ͑ର৅ͷϨίʔυ
43. ൱ఆԠ౴ͷࠩ͠ସ͑ ΞλοΫϕΫλ  ِ૷Ԡ౴ 差し替え後のレコード EDNS パディングオプションによる メッセージサイズとチェックサムの調整
44. ରࡦ
45. ݖҖɾϦκϧό૒ํͷରࡦ ରࡦ w ׬શͳରࡦ͸ࠔ೉
     %'
    ϑϥάΛཱͯΔͱ
    .56
    ͷখ͍͞ܦ࿏Ͱ෭࡞༻
    ‣ Ԡ౴Λड৴Ͱ໊͖ͣલղܾ͕ࣦഊ͢ΔՄೳੑ
    w ؇࿨ࡦ
     &%/4
    CV⒎FS
    TJ[F
    Λখ͘͞͠ɺେ͖͍Ԡ౴͸
    5$1
    ϑΥʔϧόοΫ
    ‣ qBH
    EBZ
    
    Ͱ͸
    
    όΠτΛਪ঑
    ‣ චऀΒ͸
    
    όΠτΛਪ঑ 
46. ݖҖɾϦκϧό૒ํͷରࡦ ରࡦ w %/44&$
    ΁ͷ׬શͳରԠ
     /4&$
    0QU0VU
    ΋ແޮʹ
     ීٴ్্͕ةݥ
    ‣ Ϧκϧόͷ
    %0
    Ϗοτ͕༗ޮͩͱະॺ໊κʔϯ΁ͷҕৡԠ౴ʹ
    /4&$
    
    334*(
    ͕෇Ճ
    ‣ 4IVMNBO
    Β
    <>
    ͷࢦఠ  "incremental DNSSEC deployment is vulnerable to our cache poisoning attacks, and complete adoption of DNSSEC may take considerable time, since it depends on adoption by both name server and resolver."
47. ݖҖαʔόଆ ରࡦ w 1.56%
    ͷ݁ՌΛແࢹ
     -JOVY
    ,FSOFM
    
    Ҏ߱ͷ
    IP_PMTUDISC_OMIT
    ιέοτΦϓγϣϯΛ༗ޮʹ
     04
    ͱݖҖαʔό࣮૷྆ํͷରԠ͕ඞཁ
    ‣ #*/%
    
    Ҏ߱
    <>
    ‣ /4%
    
    Ҏ߱
    <>
    ‣ ,OPU
    %/4
    
    Ҏ߱
    <>
    ‣ 1PXFS%/4
    SD
    Ҏ߱
    <>  <>
    IUUQTXXXJTDPSHCMPHTCJOEBQSJM
    <>
    IUUQTXXXOMOFUMBCTOMQSPKFDUTOTEEPXOMPBEOTE
    <>
    IUUQTXXXLOPUEOTD[WFSTJPOIUNM
    <>
    IUUQTEPDQPXFSEOTDPNBVUIPSJUBUJWFDIBOHFMPHIUNMDIBOHFSD
48. Ϧκϧόଆ ରࡦ w ϑϥάϝϯτͨ͠Ԡ౴Λυϩοϓ
    w ॺ໊ݕূ͠ͳ͍৔߹͸
    %0
    ϏοτΛΦϑʹ
     334*(
    ΍
    /4&$
    ͸ෆཁ
     ϝοηʔδαΠζΛ࡟ݮ 
49. ͦͷଞͷ؇࿨ࡦ ରࡦ w 2/".&
    NJOJNJTBUJPO
     &NQUZ
    /PO5FSNJOBM
    ͳͲ෭࡞༻͋Γ
    w ֤κʔϯͷ
    /4
    
    """""
    ϨίʔυΛ
    "VUIPSJUBUJWF
    "OTXFS
    ͱͯ͠Ωϟογϡ
     ΑΓߴ͍৴པ౓ͷԠ౴ΛಘΔ
    ‣ 3'$
    
    TFDUJPO
    
    3BOLJOH
    EBUB
     Ωϟογϡͷ্ॻ͖Λ๷ࢭ 
50. &%/4
    CVGGFS
    TJ[F ରࡦ w 
    WT
    
     
    ͩͱ
    -JOVY
    Ͱ
    1.56
    TQPPpOH
    Ͱ߈ܸͰ͖ΔՄೳੑ͕࢒Δ
     
    ͸
    5$1
    ϑΥʔϧόοΫ͕૿Ճͯ͠ύϑΥʔϚϯε͕௿Լ͢Δ Մೳੑ 
51. CVGGFS
    TJ[F
    ࡟ݮ΋৔߹ʹΑͬͯ͸ʜ ରࡦ  w ݖҖαʔό࣮૷ʹΑͬͯ ෭࡞༻͋Γ
     ஸ౓
    HMVF
    Ϩίʔυͷखલ ·ͰͷόοϑΝαΠζʹ ͳ͍ͬͯΔ৔߹
     HMVF
    Ϩίʔυ͕ඞཁͳͷ ʹ͍ͭͯ͜ͳ͍
     5$
    Ϗοτ΋ཱͬͯͳ͍ ҕৡԠ౴ HMVF
    ͕ͳ͍
52. ͲΕ͘Β͍ରԠͯ͠Δͷ͔
53. ௐࠪ ରԠঢ়گ w ର৅
    "MFYB
    UPQ
    .
    ͷ্Ґ
    
    υϝΠϯ
    w ಺༰
    %/4
    qBH
    EBZ
    
    ΁ͷରԠঢ়گ
     5$1
    ΫΤϦʹԠ౴͢Δ͔
     όοϑΝαΠζͷઃఆ஋͕Ͳ͏ͳ͍ͬͯΔ͔ 
54. νΣοΫͰ͖ͨυϝΠϯ਺ɾαʔό਺ ରԠঢ়گ  
    ݄຤ 
    ݄த० 
    ݄ॳ० υϝΠϯ਺    ݖҖαʔό਺   
55. ݁Ռ ରԠঢ়گ  w 5$1
     
    ׂҎ্ରԠࡁΈ   
    ݄   
    ݄   
    ݄   
    ݄   
    ݄   
    ݄ ݖҖαʔό͝ͱ υϝΠϯ໊͝ͱ Ԡ౴͋Γ Ԡ౴ͳ͠
56. ௐࠪ݁Ռ ରԠঢ়گ w &%/4
    CV⒎FS
    TJ[F
     
    ͕࠷ଟɺ
    ͕एׯ૿Ճ܏޲͕ͩ΄ͱΜͲมԽͳ͠                 ݖҖαʔό͝ͱ 
    ݄ 
    ݄ 
    ݄                
    ݄ 
    ݄ 
    ݄ υϝΠϯ໊͝ͱ    ͦͷଞ ඇରԠ
57. ͱ͜ΖͰ
    4"%
    %/4
    ͱͷҧ͍͸
58. ߈ܸ֓ཁ 4"%
    %/4 w *$.1
    SBUF
    MJNJU
    Λѱ༻ͯ͠ιʔεϙʔτΛεΩϟϯ
     QSPCF
    ύέοτΛ
    HMPCBM
    SBUF
    MJNJU
    ্ݶ·Ͱ
 ૹ৴
     ֬ೝ༻ͷύέοτʹରͯ͠
    *$.1
    QPSU
    
 VOSFBDIBCMF
    ͕ฦͬͯ͜Ε͹
    QSPCF
    ͨ͠
 ͏ͪͷͲ͔͕͜։͍͍ͯΔ
     ೋ෼୳ࡧͰߜΓࠐΉ
    w ैདྷܕͷΩϟογϡϙΠζχϯάΛޮ཰త
 ʹ࣮ߦ
    w Τϯτϩϐʔ͸
    
    ϙʔτεΩϟϯ
    
    5Y*% 216 + 216  ,.BO
    FU
    BM
    %/4
    $BDIF
    1PJTPOJOH
    "UUBDL
    3FMPBEFE
    3FWPMVUJPOT
    XJUI
    4JEF
    $IBOOFMT 
    
    Q
    'JHVSF
    
    ΑΓҾ༻
59. *1
    ϑϥάϝϯτ߈ܸͱࣅͯΔͱ͜Ζ 4"%
    %/4 w P⒎QBUI
    ߈ܸ
    w ιʔεϙʔτϥϯμϚΠζ͕ແޮ
    w *$.1
    ͕ؔ܎͢Δ
    w ߈ܸͷΤϯτϩϐʔ͕ैདྷΑΓ௿͍
    w 5$1
    Λ࢖͏ํ͕Αͦ͞͏ 
60. *1
    ϑϥάϝϯτ߈ܸͱҟͳΔͱ͜Ζ 4"%
    %/4 w ߈ܸʹ࢖͏Ԡ౴
     4"%
    %/4
    ैདྷͱಉ͡
     *1
    ϑϥάϝϯτ߈ܸ
    Ԡ౴ͷબ୒ࢶ͕ڱ͍
    w ࣌ؒͷՔ͗ํ
     4"%
    %/4
    3FTQPOTF
    3BUF
    -JNJU
    PS
    $/".&
    DIBJO
    ‣ ಛʹϙʔτ୳ࡧ͸࣌ؒʹγϏΞ
     *1
    ϑϥάϝϯτ߈ܸ
    ِ૷ϑϥάϝϯτͷࣄલૹ৴
    w Τϯτϩϐʔ 
61. *1
    ϑϥάϝϯτ߈ܸͱҟͳΔͱ͜Ζ 4"%
    %/4 w ରࡦ
     4"%
    %/4
    ‣ %/44&$
    Y
    FODPEJOH
    %/4
    $PPLJF
    connect()
    Λ࢖͏
    ‣ *$.1
    %FTUJOBUJPO
    6OSFBDIBCMF
    Λฦ͞ͳ͍
     %/4
    $PPLJF
    ͸
    *1
    ϑϥάϝϯτ߈ܸͰ΋
    
    ෼ׂͳΒ༗ޮ
    w *$.1
    ͷ੍ݶͷӨڹ
     *1
    ϑϥάϝϯτ߈ܸ
    1.56%
    ΛϒϩοΫ͢Δͱ
    1.56%
    CMBDL
    IPMF
    ʹ 
62. ·ͱΊ
63. ·ͱΊ *1
    ϑϥάϝϯςʔγϣϯ߈ܸ w %/4
    qBH
    EBZ
    
    *1
    ϑϥάϝϯςʔγϣϯ߈ܸ΁ͷରԠ
    w *1
    ϑϥάϝϯτ߈ܸ
    ϑϥάϝϯτύέοτΛِ૷ͯ͠ಟೖΕ
    w &%/4
    CV⒎FS
    TJ[F
    Λখ͘͢͞ΔɺϑϥάϝϯτύέοτΛ υϩοϓ͢ΔͳͲͷରࡦ
     5$1
    ରԠ͸ඞਢ
    w 5$1
    ʹ͸ରԠ͍ͯ͠Δ͕όοϑΝαΠζ࡟ݮͷରԠ͸ਐ·ͣ
    w 04ɾιϑτ΢ΣΞͷΞοϓσʔτɺઃఆͷ֬ೝΛ