Measuring DNS Abuse is Difficult

The DNS Abuse Institute launches a new level of reporting that reveals the spectrum of how malicious phishing and malware is distributed across the DNS registration ecosystem.

A Holistic Approach to Tackling DNS Abuse for Registries and Registrars

In September 2023, ICANN hosted the DNS Symposium in Da Nang, Vietnam. This included a ‘Day of DNS Abuse Discussions’ with a comprehensive agenda.  This article provides a high level overview for what tackling DNS Abuse looks like from the perspective of a registrar or registry operator. The purpose is to provide guidance for what […]

Challenges in Measuring DNS Abuse

From the creation of NetBeacon Measurement and Analytics Platform (MAP), we knew that measuring DNS Abuse* would be difficult and that it would be beneficial to anticipate the challenges we would encounter. With more than a year of published NetBeacon MAP: Monthly Analysis reports, we are sharing insights into one of the obstacles we have […]

Introducing Compass Dashboards

The NetBeacon Institute is pleased to announce the general availability of NetBeacon Measurement and Analytics (MAP): Dashboards to help domain registrars and registries to better understand and combat DNS Abuse. The new NetBeacon MAP: Dashboards provide registrars and registries with unprecedented views into individualized data on phishing and malware across their domains under management (DUM) […]

注册商和注册机构的《通用滥用政策》

最近,一位注册商联系我,他们真切关注采取更多措施来解决 DNS 滥用的问题,但不确定应该从哪里开始着手。DNS 滥用是一个复杂的问题,没有明确的切入点来着手解决。不止这一家注册商,许多注册机构和注册商越来越担心滥用行为,并需要帮助来着手解决这一问题。 本文是三部分系列文章的第一篇,该系列文章旨在为制定反滥用实践的关键组成部分提供合理、简明的介绍。第一篇文章致力于提供合理的法律依据,或者说基本的 DNS 滥用政策,以解决滥用问题。接下来的两篇文章将讨论管理 DNS 滥用的有效手段以及实际缓解程序。 本政策是与互联网和司法管辖区政策网络 (I&J) 共同制定的,我们对他们的贡献和支持表示感谢。I&J 在这一领域有很多非常好的内容,其中包括他们的 Toolkit: DNS Level Action to Address Abuses(工具包:DNS 层面应对滥用的行动),我建议任何对减少滥用感兴趣的人士都要读一下。DNS 滥用研究所也是 I&J 域名联络小组的积极参与者。  DNS 滥用具体政策 大多数注册商都会在其网站上发布某种形式的“服务条款”或“可接受的使用政策”。这些政策条款通常赋予注册商出于多种原因而终止服务的自由裁量权。 发布和采用特定的滥用政策提供了几个优势,主要是在于明确性和保护性方面。明确的滥用政策以及对其执行的声誉,可以对不良行为者使用该服务构成威慑。如果注册商或注册机构的相关政策涵盖了滥用行为,那么在对滥用行为采取行动时也会得到更有力的法律保护。  在我们详细介绍通用政策如何发挥作用之前,我想先说明一下它是如何制定的。首先,我们专门制定了这一通用政策,这样所有注册商或注册机构都可以根据具体情况来使用/修改/实施此政策。这就是为什么该政策采用创意共享许可,特别是 CC By 4.0 license(CC By 4.0 许可)的原因,这些许可允许任何人在注明 DNSAI 的情况下分享和调整材料。其次,我们正在将其转换为 Markdown 格式并将存放在 Github 中。希望这能让感兴趣的人士对其进行修改、创建分支,并与政策交互。目标是采用模块化方法,以便纳入或排除不同的危害,以满足每个用户的需求。 我们的意图是在未来利用这些机制来共享和调整与类似 DNSAI 工作相关的内容。 引言 第一段是一个简单明了的引言。虽然本政策侧重于 DNS 滥用问题,但许多注册商和注册机构将解决其他危害问题,在其中留下空白处,注册商和注册机构可根据自己的选择详细说明其他类别的危害。 本反滥用政策(以下简称“政策”)适用于所有由[名称]作为[注册商/注册运营商]的域名注册。本政策主要针对域名系统 (DNS) 的技术滥用(“ DNS 滥用”)。[注册商/注册机构可以选择详细说明其解决的网站内容问题类别,例如儿童性虐待材料] 定义 […]

A New Phase of Measuring DNS Abuse

The Institute launches a new level of reporting that reveals the spectrum of how malicious phishing and malware is distributed across the DNS registration ecosystem.

Technical Resources for Combating DNS Abuse

The NetBeacon Institute serves as a resource for all interested stakeholders fighting DNS Abuse, whether they are registries, registrars, security researchers, or any other interested party. The following content serves as a reference to technical tools and links to additional resources. ICANN’s Domain Abuse Activity Reporting Tool As ICANN describes it, “The overarching purpose of […]

DNSAI Releases 2022 Annual Report

The 2022 DNSAI Annual Report is available! Read about the important progress we have made to report DNS Abuse and share helpful information with our community.