en

DNS Security Facilitation Initiative Technical Study Group Delivers Final Report

13 October 2021

Merike KäoMerike Käo

I'm pleased to report that the Domain Name System Security Facilitation Initiative Technical Study Group (DSFI-TSG) has delivered our Final Report to the ICANN CEO for his consideration. The TSG was established by the CEO in May 2020 to investigate mechanisms to strengthen collaboration and communication on security and stability issues related to the Domain Name System (DNS).

The TSG brought together experts in DNS standards and operations, including those who have experience handling cybercrime, security incidents, registry/registrar operations, and critical infrastructure operations.

As I shared in my recent update, the TSG held bi-weekly virtual working sessions over the past year to ensure that we were thorough in our evaluation and consideration. The cross-functional nature of our group gave us a variety of perspectives, which made for informative and well-rounded discussions.

The final report offers a review of the common vectors of attack on or involving the DNS. By examining the common patterns for attacks, the DSFI-TSG was able to work through some of the reasons why those attack vectors are successful and assess existing and missing mitigations for each.

As a result, the DSFI-TSG offers 12 recommendations for consideration, primarily in the areas of education and awareness, and suggests areas of research where guidance around best practice guidance is lacking. The DSFI-TSG determined that research, education, and awareness offer opportunities for ICANN org to have a strong and positive impact on the global DNS.

I'd like to acknowledge the consistent 18-month dedication of the TSG members and the ICANN org support team who accomplished this work in a 100% virtual environment. This was a true team effort. I'd also like to thank the technical consultation reviewers for their diligent review and comments, and the DSFI-TSG Steering Committee for their guidance.

To learn more about the work of the DSFI-TSG and the recommendations we have proposed, please join us for the ICANN72 Prep Week session: Introducing the DNS Security Facilitation - Technical Study Group (DSFI-TSG) on 14 October 2021 at 20:00 UTC. To attend the sessions, please register for ICANN72.