Logo
ICANN
ICANN
Filtered Search

Are you sure you want to sign out from http://www.icann.org?

If you want to sign out from both http://www.icann.org and ICANN Account, click here.

ICANN 博文

敬请阅读 ICANN 的博文，了解最新政策制定活动和区域事务等等。

国家和地区顶级域 (ccTLD) 参与 ICANN 的域名滥用活动报告 (DAAR) 系统

2020 年 07 月 28 日
作者：
Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research

Samaneh is a reporting to John Crain, Chief Security, Stability & Resiliency Officer and is part of the Office of CTO (OCTO) group. She is based in ICANN’s Europe Region and will be working remotely from the Netherlands. As the SSR Specialist, Samaneh works in close coordination with other ICANN organization functions to implement ICANN’s Security, Stability and Resiliency strategies. Samaneh carries out research on DNS security and abuse. She also represents ICANN on matters relating to the SSR of the Internet’s system of unique identifiers within ICANN’s remit as well as helping to develop technical work, positions and produce materials related to the administration of those identifiers from an SSR perspective.

Samaneh is from a multi-disciplinary background. While she is an Electronics Engineer by training, she studied Engineering and Policy Analysis for her masters. She holds a PhD degree in Internet Security and Data Analytics from the Delft University of Technology in the Netherlands. She worked as a Post-Doctoral researcher at the same university where she did research on banking security and underground markets utilizing advanced statistical techniques and machine learning.

She has collaborated with other research teams as a visiting scholar; at KU Leuven, DistriNet Research Group she worked on Internet measurements to estimate web vulnerabilities and measure patching practices of hosting servers. Additionally, she worked with scholars from the security and privacy lab at University of Innsbruck on designing abuse metrics that can reliably measure security performance of Internet identifiers.

Samaneh has authored publications on web security, cyber security, Internet measurements, underground economy, and development of security metrics design using advance statistical methods.

Samaneh speaks English, Farsi, Dutch and has basic knowledge in Arabic. She is a big fan of board games. In her free time, she runs, plays tennis, and piano.

 

自 2019 年末以来，国家和地区顶级域 (ccTLD) 开始自愿参与由 ICANN 首席技术官办公室 (OCTO) 设计的域名滥用活动报告 (Domain Abuse Activity Reporting, DAAR) 系统。DAAR 系统旨在针对顶级域 (top-level domain, TLD) 注册管理机构面临的域名注册和安全威胁行为进行研究和报告。今天，我们很高兴地宣布首批加入本系统的八个 ccTLD 包括：.au、.ee、.mw、.nu、.se、.sv、.tw、.tz，它们将能够每日接收 DAAR 的数据。

DAAR 中使用的数据源于 TLD 注册管理机构提供的域文件，和一批列在监管清单上的域名系统 (Domain Name System, DNS) 可靠提供商搜集的可信数据。随着近期系统的发展，ccTLD 运营商也可每日使用监督系统应用程序编程接口 (Monitoring System Application Programing Interface, MoSAPI) 搜集它们的集合 DAAR 数据。MoSAPI 接口的设计旨在允许注册管理运行机构获取由 ICANN《服务水平协议》监控系统 (Service Level Agreement Monitoring, SLAM) 收集的信息。尽管 ccTLD 运营商并不受制于 SLAM 监控的《服务水平协议 (SLA)》，但使用 MoSAPI 将使得所有参与 DAAR 的注册管理机构使用一套统一界面。集合数据搜集各种安全威胁信息—例如：网络钓鱼、僵尸网络命令与控制、恶意软件分发和垃圾邮件（做为传输其他安全威胁的载体）—并将其按照威胁类型进行分类（请点击此处了解这些安全威胁类型的定义）。这些数据集将与通过 MoSAPI 提供的通用顶级域 (gTLD) 的数据集相同。访问这类数据将使得 ccTLD 运营商监督每日每种威胁类型的 DAAR 安全威胁水平。

为了促进大家深入理解全球 DNS 面临的滥用情况，我们诚邀其他 ccTLD 运营商参与 DAAR 项目。首先，ccTLD 运营商应将请求发送至：globalsupport@icann.org 启动这一流程。该流程包括一系列技术和管理步骤，以确保 ICANN 能够下载该 ccTLD 的域文件，且 ccTLD 能够通过 MoSAPI 获取数据。此外，愿意签署《谅解备忘录 (MoU)》的 ccTLD 也可以签署这份文件。

我们希望与 ccTLD 社群进行沟通交流，以确定针对 ccTLD 参与 DAAR，我们需要提供哪些最佳分析内容和格式。针对 gTLD 来说，我们目前根据 DAAR 的数据发布月报，其中包括了匿名和集合分析数据。我们愿意为 ccTLD 和广大社群提供更加实用的不同格式和分析数据。我们期待大家提供反馈意见。请通过我们的电子邮件清单或向我们发送电子邮件 DAAR@icann.org，告知我们你们的看法。

Authors

Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research
Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research

Samaneh is a reporting to John Crain, Chief Security, Stability & Resiliency Officer and is part of the Office of CTO (OCTO) group. She is based in ICANN’s Europe Region and will be working remotely from the Netherlands. As the SSR Specialist, Samaneh works in close coordination with other ICANN organization functions to implement ICANN’s Security, Stability and Resiliency strategies. Samaneh carries out research on DNS security and abuse. She also represents ICANN on matters relating to the SSR of the Internet’s system of unique identifiers within ICANN’s remit as well as helping to develop technical work, positions and produce materials related to the administration of those identifiers from an SSR perspective.

Samaneh is from a multi-disciplinary background. While she is an Electronics Engineer by training, she studied Engineering and Policy Analysis for her masters. She holds a PhD degree in Internet Security and Data Analytics from the Delft University of Technology in the Netherlands. She worked as a Post-Doctoral researcher at the same university where she did research on banking security and underground markets utilizing advanced statistical techniques and machine learning.

She has collaborated with other research teams as a visiting scholar; at KU Leuven, DistriNet Research Group she worked on Internet measurements to estimate web vulnerabilities and measure patching practices of hosting servers. Additionally, she worked with scholars from the security and privacy lab at University of Innsbruck on designing abuse metrics that can reliably measure security performance of Internet identifiers.

Samaneh has authored publications on web security, cyber security, Internet measurements, underground economy, and development of security metrics design using advance statistical methods.

Samaneh speaks English, Farsi, Dutch and has basic knowledge in Arabic. She is a big fan of board games. In her free time, she runs, plays tennis, and piano.

 

您还可能喜欢