당사는 인터넷을 비즈니스를 하고 교류를 하기에 안전하고 신뢰할 수 있는 공간으로 만들기 위해 최선의 노력을 다하고 있습니다.
TRANSITIVE TRUST CHECKER
The Transitive Trust Checker produces trust-relationship graphs for one or more given DNS zones. The graphs show how the zones are related based on names, addresses and AS numbers.View tool
Keytool is a simple Web form designed to assist with manipulation of DNSKEY data. It can re-format DNS key records, generate DS records and generate lines suitable for pasting into a named.conf file.View tool
The ability to measure network and server behaviors from different network vantage points is important for understanding the general health of an IP network ecosystem. DNSViz is a tool for visualizing the status of a DNS zone. It was designed as a resource for understanding and troubleshooting deployment of the DNS Security Extensions (DNSSEC). It provides a visual analysis of the DNSSEC authentication chain for a domain name and its resolution path in the DNS namespace, and it lists configuration errors detected by the tool. Watch this webinar to learn more about DNSViz and how it might be used to vastly improve your DNS experience.View tool
SELF-SERVE OPEN RESOLVER SCANNING
Open DNS Resolvers have been implicated in recent large-scale DDoS attacks. Many networks are unwitting homes to open resolvers, with some groups estimating as many as 20 million on the Internet. Using Verisign's self-service scanning tool, network operators can identify and monitor their address space for open resolvers at their convenience.View tool
SecSpider is a utility to aid people's understanding of the size, scope, and trends of the global rollout of DNSSEC. Since early 2005, SecSpider has captured historical information about various zones and operated as a distributed key lookup service. The list of zones monitored are a combination of zones submitted by users, crawled from a list of over 2.5 million zones, and those walked via NSEC walking. For SecSpider to classify a zone as "secure," the zone must support EDNS0, have RRSIG records attached to resource record sets (RRsets), not have a CNAME for the zone's domain name, and provide NSEC records for denial of existence.View tool