The Domain Name System (DNS) is one of the most important components of today’s Internet, and is the standard naming convention between human-readable domain names and machine-routable Internet Protocol (IP) addresses of Internet resources. However, due to the vulnerability of DNS to various threats, its security and functionality have been continuously challenged over the course of time. Although, researchers have addressed various aspects of the DNS in the literature, there are still many challenges yet to be addressed. In order to comprehensively understand the root causes of the vulnerabilities of DNS, it is mandatory to review the various activities in the research community on DNS landscape. To this end, this paper surveys more than 170 peer reviewed papers, which are published in both top conferences and journals in last ten years, and summarizes vulnerabilities in DNS and corresponding countermeasures. This paper not only focuses on the DNS threat landscape and existing challenges, but also discusses the utilized data analysis methods, which are frequently used to address DNS threat vulnerabilities. Furthermore, we looked into the DNS threat landscape from the view point of the involved entities in the DNS infrastructure in an attempt to point out more vulnerable entities in the system.

域名系统（DNS）是当今Internet的最重要组成部分，并且是人类可读域名和Internet资源的机器可路由Internet协议（IP）地址之间的标准命名约定。但是，由于DNS易受各种威胁的威胁，其安全性和功能性一直在不断受到挑战。尽管研究人员已经在文献中讨论了DNS的各个方面，但仍有许多挑战有待解决。为了全面了解DNS漏洞的根本原因，必须对研究领域中有关DNS格局的各种活动进行审查。为此，本文调查了近十年来在顶级会议和期刊上发表的170余篇同行评审论文，并总结了DNS中的漏洞和相应的对策。本文不仅关注DNS威胁形势和现有挑战，还讨论了常用的数据分析方法，这些方法通常用于解决DNS威胁漏洞。此外，我们从DNS基础结构中涉及的实体的角度研究了DNS威胁情况，以试图指出系统中更易受攻击的实体。