Q2/2021 - DNS Abuse Institute

DNS Abuse Institute Advisory Council, 17. Mai 2021

Am 17. Mai 2021 wurden die Nominierungen für den Advisory Council des neuen DNS Abuse Instituts bekannt gegeben. Dem 13-köpfigen Advisory Council gehören mit Chris Disspain, Bruce Tonkin und Bertrand de la Chapelle drei ehemaligen ICANN Direktoren an. Graeme Bunton, erster Direktor des DNS Abuse Institutes, sagte dazu: „The initial Advisory Council represents a diverse set of geographies, interests, backgrounds, and voices that will make the work of the Institute considerably stronger. While our goal is to have consensus within the Advisory Council, our expectation is that we’ll have robust discussions and meaningful disagreements. The Institute is clear on the harms of DNS Abuse, but remains pragmatic and open on ideas for addressing it“. Mitglieder des Advisory Council werden für drei Jahre berufen. [1]

  • Das Institut war im Februar 2021 von der „Public Internet Registry“ (PIR) gegründet worden. Am 16. Juni 2021 hat es eine „Roadmap“ für seine nächsten Aktivitäten veröffentlicht. Im Zentrum der Arbeit des Instituts stehen Fragen wie die Klärung von Sachverhalten im Zusammenhang mit einer missbräuchlichen Nutzung des Domain-Name-Systems, eine Definition, was unter DNS Abuse zu verstehen ist, die Sammlung von Fällen, bei denen das DNS angegriffen wurde und die Entwicklung von Instrumentarien, wie Registries, Registrare, ISPs und andere DNS-Stakeholder auf einen Missbrauch des Domain-Name-Systems reagieren können. Die Roadmap basiert auf drei miteinander verwobenen Initiativen:
    • The Learn Initiative,
    • The Centralized Abuse Reporting Tool (CART) und
    • The DNS Abuse Intelligence initiative.[2]
Mehr zum Thema
Q2/2021
  1. [1] Mitglieder des neuen Advisory Boards sind Drew Bagley (Crowdstrike), Bertrand de la Chapelle (Internet & Jurisdiction Policy Network), Chris Disspain (Donuts), Ashley Heineman (GoDaddy), Maureen Hilyard (PIR Advisory Council / ALAC), Maciej Korczynski (University of Grenoble), Vineet Kumar (Cyber Peace Foundation), Dean Marks (Coalition for Online Accountability), Crystal Ondo (Google), Bruna Santos (Data Privacy Brasil Research Association), Rowena Schoo (Nominet), Bruce Tonkin (auDA) und Jeff Bedser (PIR Board Liaison), in: https://dnsabueinstitute.org/introducing-the-dns-abuse-institute-advisory-council/
  2. [2] The DNS Abuse Institute Roadmap, 14. Juni 2021: The Institute’s initial programs are aligned around three initiatives: 1. The Learn initiative will fulfill the educational mandate of the Institute. The Institute will produce educational content on a regular, consistent basis, resulting in the best DNS Abuse resource library available. This content will include best practices for registries and registrar to mitigate abuse, both preventatively and reactively and for law enforcement, intellectual property interests and end-users. The Institute will also gather and curate academic research, industry white papers and case studies. 2. The Centralized Abuse Reporting Tool (CART) initiative is designed to rectify a gap: there are currently no industry standards on how to implement abuse reporting, what abuse may be reported, and where to report it. As such, there is a substantial amount of diversity in abuse reporting methods employed by registries and registrars, which can lead to unevidenced reports of abuse, often in duplicate, and frequently unactionable. These reports fill service queues and require a substantial amount of time and resources to triage. Stakeholders reporting abuse must identify exactly where and how to address abuse reports, across a myriad of registries and registrars with their own mechanism and evidence requirements. To solve these issues the DNS Abuse Institute will build a centralized abuse reporting tool. 3. Through the DNS Abuse Intelligence initiative, the Institute will offer real-time understanding of the DNS Abuse landscape. The Institute intends to build its own DNS Abuse Intelligence platform to publish DNS Abuse statics by registrar, registry, and TLD, including both ccTLDs and gTLDs. The information will be based on evidenced data that measures persistence as well as existence and distinguishes between compromised websites and malicious registrations.“ In: https://dnsabuseinstitute.org/the-dns-abuse-institute-roadmap/