Security and Stability Advisory Committee (SSAC)

The SSAC is a volunteer group of specialists in the technical security field that provides advice and insight to the ICANN community and the Board.

SSAC Publications

The SSAC produces reports, correspondence, and comments on a range of topics. The SSAC undertakes ongoing risk analysis to identify a prioritized list of topics for SSAC work. However, the ICANN Board, Advisory Committees (ACs), Supporting Organizations (SOs) or other bodies within ICANN may request that the SSAC review, comment, or give feedback on a specific topic or issue at any time.

Reports are focused on providing information, recommendations, and advice on technical security, stability, and resiliency (SSR) issues to the ICANN Board, the ICANN community, and the broader internet community. They may investigate emerging or long-term issues or could be published in response to a security event or incident, where timely notification to the community is a priority concern. They may be informational without any findings or recommendations or they could contain specific recommendations for the ICANN Board or community, and if appropriate, organized according to the groups to which they are most applicable.

Correspondence comprises letters, comments, and other documents on administrative, community, and other non-SSR issues and are normally signed by the SSAC Chair. They may take the form of a letter or a response submitted to a public comment forum. They may present recommendations regarding the issue.

Comments are prepared in response to explicit questions posed to or requests made to the SSAC, or as a response to ICANN’s public comment forum. Comments may be brief or long, depending on the issue and the extent to which the SSAC studies it.

A goal of the SSAC is to ensure that its work results in specific actions whenever possible. In order to measure progress towards this goal, the SSAC tracks any effects of each recommendation. For documents that contain recommendations for the ICANN Board, the Board Action Request Register (ARR) captures the information required to understand the status of advice and tracks it from when it is given through implementation.

Advanced Search
Select filter and click Apply to narrow your search results or click More Search Options to search for keywords within SSAC Publications.

SSAC Comments on the Draft ICANN Strategic Plan for 2009-2012 (pdf, 152.06 KB)
Additional Documents:
Executive Summary(30 Jan 2009)
SAC 036b SAC 036b PlanningComment
9 Dec 2008
9 Dec 2008
Test Report: DNSSEC Impact on Broadband Routers and Firewalls (pdf, 390.12 KB)
Additional Documents:
Executive Summary(1 Sep 2008)
Summary Results (xls, 81 KB)(16 Sep 2008)
Detailed Results (xls, 206 KB)(16 Sep 2008)
SAC 035 SAC 035 Domain Name System (DNS) SecurityReport
16 Sep 2008
16 Sep 2008
Survey of DNSSEC Capable DNS ImplementationsSAC 030 SAC 030 Domain Name System (DNS) SecurityReport
15 Jul 2008
15 Jul 2008
Preliminary Report on DNS Response Modification
Additional Documents:
Executive Summary(1 Jun 2008)
SAC 032 SAC 032 Domain Name System (DNS) AbuseAdvisory
20 Jun 2008
20 Jun 2008
Domain Name Registration Information and Directory Services (pdf, 185.78 KB)
Additional Documents:
Executive Summary(20 Jun 2008)
SAC 033 SAC 033 WHOISReport
20 Jun 2008
20 Jun 2008
SSAC Comment on the FY09 Operating Plan and Budget (pdf, 127.4 KB)SAC 034 SAC 034 PlanningComment
17 Jun 2008
17 Jun 2008
SSAC Advisory on Registrar Impersonation Phishing Attacks
Additional Documents:
Executive Summary(1 May 2008)
SAC 028 SAC 028 Registration ServicesAdvisory
26 May 2008
26 May 2008
SSAC Review of the After Action Report for the gTLD Registry Failover Exercise conducted 24-25 January 2008 (pdf, 83.92 KB)SAC 031 SAC 031 PlanningComment
23 Apr 2008
23 Apr 2008
SSAC Endorsement of Proposed Amendment to the ORG registry agreement, Security Extensions for the DNS - DNSSEC (pdf, 49.57 KB)SAC 029 SAC 029 Domain Name System (DNS) SecurityComment
17 Apr 2008
17 Apr 2008
Report on Domain Name Front Running (pdf, 172.83 KB)SAC 024 SAC 024 Registration ServicesReport
25 Feb 2008
25 Feb 2008
SSAC Comment to GNSO regarding WHOIS studies (pdf, 29.32 KB)SAC 027 SAC 027 WHOISComment
7 Feb 2008
7 Feb 2008
SSAC Advisory on Fast Flux Hosting and DNS
Additional Documents:
Executive Summary(1 Jan 2008)
SAC 025 SAC 025 Domain Name System (DNS) AbuseReport
28 Jan 2008
28 Jan 2008
SSAC Statement to ICANN and Community on Deployment of DNSSEC (pdf, 26 KB)SAC 026 SAC 026 Registration ServicesAdvisory
28 Jan 2008
28 Jan 2008
Is the WHOIS Service a Source for email Addresses for Spammers? (pdf, 959.69 KB)
Additional Documents:
Executive Summary(1 Oct 2007)
SAC 023 SAC 023 WHOISReport
23 Oct 2007
23 Oct 2007
SSAC Advisory on Domain Name Front Running (pdf, 196.87 KB)
Additional Documents:
Executive Summary(1 Oct 2007)
SAC 022 SAC 022 Registration ServicesAdvisory
20 Oct 2007
20 Oct 2007
Survey of IPv6 Support in Commercial Firewalls (pdf, 235.48 KB)SAC 021 SAC 021 AddressingReport
5 Oct 2007
5 Oct 2007
SSAC Response to IDN Program Director regarding ICANN's proposal for IDN deployment at the root level of the DNS (pdf, 72.69 KB)SAC 020 SAC 020 Internationalized Domain Name (IDN)Comment
23 Jul 2007
23 Jul 2007
SSAC Response to Comment Sought on DNS Root Zone Glue Policy (pdf, 70.51 KB)SAC 019 SAC 019 Root SystemComment
16 Mar 2007
16 Mar 2007
Testing Recursive Name Servers for IPv6 and EDNS0 SupportSAC 017 SAC 017 Root SystemReport
8 Feb 2007
8 Feb 2007
Testing Firewalls for IPv6 and EDNS0 SupportSAC 016 SAC 016 Root SystemReport
30 Jan 2007
30 Jan 2007