Logo
ICANN
ICANN
Filtered Search

Are you sure you want to sign out from http://www.icann.org?

If you want to sign out from both http://www.icann.org and ICANN Account, click here.

ICANN 博文

敬请阅读 ICANN 的博文，了解最新政策制定活动和区域事务等等。

域名滥用活动报告 (DAAR) 活动项目：现针对国家和地区顶级域 (ccTLD) 提供定制化月度报告

2021 年 01 月 20 日
作者：
Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research

Samaneh is a reporting to John Crain, Chief Security, Stability & Resiliency Officer and is part of the Office of CTO (OCTO) group. She is based in ICANN’s Europe Region and will be working remotely from the Netherlands. As the SSR Specialist, Samaneh works in close coordination with other ICANN organization functions to implement ICANN’s Security, Stability and Resiliency strategies. Samaneh carries out research on DNS security and abuse. She also represents ICANN on matters relating to the SSR of the Internet’s system of unique identifiers within ICANN’s remit as well as helping to develop technical work, positions and produce materials related to the administration of those identifiers from an SSR perspective.

Samaneh is from a multi-disciplinary background. While she is an Electronics Engineer by training, she studied Engineering and Policy Analysis for her masters. She holds a PhD degree in Internet Security and Data Analytics from the Delft University of Technology in the Netherlands. She worked as a Post-Doctoral researcher at the same university where she did research on banking security and underground markets utilizing advanced statistical techniques and machine learning.

She has collaborated with other research teams as a visiting scholar; at KU Leuven, DistriNet Research Group she worked on Internet measurements to estimate web vulnerabilities and measure patching practices of hosting servers. Additionally, she worked with scholars from the security and privacy lab at University of Innsbruck on designing abuse metrics that can reliably measure security performance of Internet identifiers.

Samaneh has authored publications on web security, cyber security, Internet measurements, underground economy, and development of security metrics design using advance statistical methods.

Samaneh speaks English, Farsi, Dutch and has basic knowledge in Arabic. She is a big fan of board games. In her free time, she runs, plays tennis, and piano.

 

为了增强域名滥用活动报告 (Domain Abuse Activity Reporting, DAAR) 对社群的有效性，2019 年 11 月，国家和地区顶级域 (country code top-level domains, ccTLD) 受邀参加由 ICANN 首席技术官办公室 (Office of the Chief Technology Officer, OCTO) 设计的 DAAR 系统。ccTLD 可以通过自愿分享域文件参与进来。这些域文件将仅用于 DAAR 系统，且不会因其他用途或在 ICANN 的集中化域资料服务 (Centralized Zone Data Service, CZDS) 中被使用或分享。每个参与本项目的 ccTLD 将能够按日通过 ICANN 的监督系统应用程序编程接口 (MoSAPI) 收取 DAAR 数据。

2020 年 7 月，本人发布了一篇博文，宣布已有多个 ccTLD 自愿参与 DAAR 系统。迄今为止，已有 12 个 ccTLD 加入了进来。这不仅使得 DAAR 系统受益，让更多域名得以加入进来，更好地展示安全威胁的集中领域；我们还希望这对 ccTLD 社群也能带来重要好处。

我们现将为参与进来的 ccTLD 提供定制化的月度报告。这些报告囊括了对每个 ccTLD 提交的数据进行的具体分析，且仅与该 ccTLD 进行分享。在每份报告中，该 ccTLD 的相关统计数据都将与所有其他 ccTLD 和通用顶级域 (gTLD) 的数据进行匿名比较。这种定制化报告旨在帮助 ccTLD 了解自身与其他顶级域 (TLD) 相比，在信誉拦截列表 (Reputation Block List, RBL) 中的安全威胁数据上处在一个怎样的位置。这些文件是对 DAAR 月度报告和每日安全威胁评分的补充。

域名滥用活动报告 (DAAR) 简介

ICANN 的 DAAR 系统旨在针对顶级域 (top-level domain, TLD) 注册管理机构面临的域名注册和安全威胁行为进行研究和报告。域名数据来自 ICANN 可以访问的域文件。这种威胁数据则从一批域名系统 (Domain Name System, DNS) 的信誉拦截列表 (Reputation Block List, RBL) 提供商处获取。通过 ICANN 的 MoSAPI 和依据我们用来识别网络钓鱼、恶意软件、垃圾邮件、僵尸网络命令与控制威胁的 RBL 中所列信息，DAAR 会针对每个 gTLD 提供原数据和安全威胁评分。自 2018 年以来发布的 DAAR 报告请参见此处。

DAAR 系统搜集的数据可以帮助 ICANN 组织和社群讨论长期安全威胁趋势。通过 MoSAPI，单个注册管理机构可以将自身的 DAAR 数据与其他所有注册管理机构在 DAAR 系统中的总体数据进行比较。尽管是匿名比较，但这类数据仍旧促使多家大型签约方机构增强自身的防滥用措施和框架。此外，独立研究员们也开始采用我们的方法提供衡量数据，帮助提高社群对 DNS 安全威胁情况的理解。

后续工作

值得注意的是，我们与参与项目的 ccTLD 分享的初步定制化报告仍旧处于草拟阶段。为了继续发布定期报告并改进各项功能，我们诚邀自愿参与的 ccTLD 查看这些报告，并向我们提供反馈意见。

我们要衷心感谢自愿加入 DAAR 的 ccTLD。我们希望定制化的月度报告能够带来用处，且从 ccTLD 获取的反馈意见能够为社群改进 DAAR 的服务。

最后，为了在 DAAR 系统中生成更多准确可靠的分析与比较信息，我们希望越来越多的 ccTLD 能够参与进来。我们鼓励所有 ccTLD 能够了解参与 DAAR 系统对自身和社群能够带来什么好处。

 

如需讨论有关 DAAR 项目数据共享和任何 DNS 安全威胁和滥用相关主题的其他衡量措施，请加入 DNS 滥用衡量措施的邮件清单，或访问 DAAR 网页：https://www.icann.org/octo-ssr/daar。

Authors

Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research
Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research

Samaneh is a reporting to John Crain, Chief Security, Stability & Resiliency Officer and is part of the Office of CTO (OCTO) group. She is based in ICANN’s Europe Region and will be working remotely from the Netherlands. As the SSR Specialist, Samaneh works in close coordination with other ICANN organization functions to implement ICANN’s Security, Stability and Resiliency strategies. Samaneh carries out research on DNS security and abuse. She also represents ICANN on matters relating to the SSR of the Internet’s system of unique identifiers within ICANN’s remit as well as helping to develop technical work, positions and produce materials related to the administration of those identifiers from an SSR perspective.

Samaneh is from a multi-disciplinary background. While she is an Electronics Engineer by training, she studied Engineering and Policy Analysis for her masters. She holds a PhD degree in Internet Security and Data Analytics from the Delft University of Technology in the Netherlands. She worked as a Post-Doctoral researcher at the same university where she did research on banking security and underground markets utilizing advanced statistical techniques and machine learning.

She has collaborated with other research teams as a visiting scholar; at KU Leuven, DistriNet Research Group she worked on Internet measurements to estimate web vulnerabilities and measure patching practices of hosting servers. Additionally, she worked with scholars from the security and privacy lab at University of Innsbruck on designing abuse metrics that can reliably measure security performance of Internet identifiers.

Samaneh has authored publications on web security, cyber security, Internet measurements, underground economy, and development of security metrics design using advance statistical methods.

Samaneh speaks English, Farsi, Dutch and has basic knowledge in Arabic. She is a big fan of board games. In her free time, she runs, plays tennis, and piano.

 

您还可能喜欢