4、参考资料
DNS脆弱性列表
• http://www.sans.org/newsletters/risk/display.php?v=4&i=11
• http://www.sans.org/newsletters/risk/display.php?v=4&i=14#widely1
• http://isc.sans.org/presentations/dnspoisoning.php
• http://thekelleys.org.uk/dnsmasq/doc.html
• http://www.icir.org/vern/papers/reflectors.CCR.01/node8.html
DNS版本纵览和服务器软件
• http://mydns.bboy.net/survey/
• http://www.dns.net/dnsrd/servers/
NDS内部工作机制
• http://www.internic.net/faqs/authoritative-dns.html
• http://www.sans.org/rr/whitepapers/dns/
• http://www.cert.org/archive/pdf/dns.pdf
• http://www.isc.org/index.pl
• http://www.microsoft.com/windows2000/technologies/communications/dns/default.mspx
• http://www.dns.net/dnsrd/
DNSSEC部署
• http://www.dnssec-deployment.org/
• http://www.dnssec.net
• http://csrc.nist.gov/publications/nistpubs/800-81/SP800-81.pdf
DNS安全非常好的实践
• http://www.cymru.com/Documents/secure-bind-template.html
• http://www.softpanorama.org/DNS/security.shtml
• http://cookbook.linuxsecurity.com/sp/bind_hardening8.html
• http://www.isc.org/index.pl?/sw/bind/bind-security.php
• http://www.cisecurity.org/bench_bind.html
• http://www.cert.org/tech_tips/usc20_full.html