Skip to main content
Resources

新闻发布:ICANN 开发工具监测和打击网上恶意活动

域名系统 (Domain Name System) 协调人回应 2019 冠状病毒病 (COVID-19) 和俄乌战争对所有用户构成的互联网安全威胁

洛杉矶 - 日期:2022 年 5 月 - 在全球危机中,例如一场疫情或战争,恶意的在线活动通常会增加。不良行为者寻求新的方法,未经用户同意在其设备上安装恶意软件,以收集敏感信息或进入私人计算机系统。他们还诱骗用户透露敏感的个人、企业或财务信息——被称为网络钓鱼。

为了打击互联网恶意软件和网络钓鱼,互联网名称与数字地址分配机构 (Internet Corporation for Assigned Names and Numbers organization, ICANN) 开发了一种基于证据的方法,以确定那些疑似用于恶意目的、和与 COVID-19 疫情和俄乌战争有关的域名。

域名安全威胁信息搜集和报告 (Domain Name Security Threat Information Collection and Reporting, DNSTICR) 是一款创新的、强大的、语言全面的工具,可以搜索并向注册服务机构(即提供域名注册服务的实体)报告域名的潜在恶意活动及其背景信息。DNSTICR 给 ICANN 为保护互联网用户免受域名系统 (Domain Name System, DNS) 安全威胁的斗争提供了另一层防御。

自疫情开始以来,ICANN 已经分析了 579 个独立术语,导致 438,819 个域名接受检查。其中有 23,452 个被认为是潜在活跃和恶意的域名。在 ICANN 分析了这些域名并报告了网络钓鱼攻击后,注册服务机构就拥有了决定取缔威胁所采用的最佳行动方案所需的全部证据。

"ICANN 致力于在缓和这些威胁的集体努力中发挥自己的作用,特别是当犯罪分子试图使用域名系统来利用毫无戒心的互联网用户时,"ICANN 首席技术官约翰·克莱恩 (John Crain) 指出。

ICANN 对 DNS 安全威胁的回应体现了本组织努力提供可核实的数据、无偏见的研究和专业知识,以促进在互联网技术运营领域开展以事实为依据的讨论。

DNSTICR 倡议只是 ICANN 的众多努力之一。这些努力符合本组织的宗旨和义务,即促进公共和私人行为者的广泛参与,改善互联网的安全性、可靠性和互用性。ICANN 的 DNS 安全威胁缓和项目依靠连续四年的数据,在近期发表了一份关于 DNS 滥用趋势的报告(请阅读《回顾四年:DNS 滥用趋势简报 (The Last Four years in Retrospect: A Brief Review of DNS Abuse Trends)》

有关这一工具的更多信息,请访问我们的 DNSTICR 专属网页:https://www.icann.org/dnsticr-zh

如需了解 ICANN 在缓和 DNS 安全威胁方面所做的努力,请查看:https://www.icann.org/dns-security-threat

####

ICANN 简介

互联网名称与数字地址分配机构 (ICANN) 的使命在于确保全球互联网的稳定、安全与统一。要在互联网上访问另一个人的信息,您必须在电脑或其他设备中键入一个地址——可以是一个名称或是一串数字。这个地址必须是独一无二的,只有这样电脑之间才能互相识别。ICANN 负责协调这些分布在世界各地的唯一标识符并提供相应支持。ICANN 是一个非营利性公益机构,成立于 1998 年,其社群的参与者遍布世界各地。

媒体联系人

亚历山大·丹斯 (Alexandra Dans)
美洲地区传播主管
乌拉圭蒙得维的亚
+598 95 831 442
alexandra.dans@icann.org
press@icann.org

Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as""icann.org"" is not an IDN."