Re: [council] Fast Flux DNS

[cyrilchua@xxxxxxxxxxxxxx]

Hi all

I'll second the motion.

Regards
Cyril


                                                                           
             "Mike Rodenbaugh"                                             
             <mxrodenbaugh@yah                                             
             oo.com>                                                    To 
             Sent by:                  "'Council GNSO'"                    
             owner-council@gns         <council@xxxxxxxxxxxxxx>            
             o.icann.org                                                cc 
                                                                           
                                                                   Subject 
             28/02/2008 01:12          [council] Fast Flux DNS             
             AM                                                            
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           





Hello,

I propose the following motion for Council consideration in our next
meeting
on March 7th, may I please have a 'second'?

Thanks,
Mike Rodenbaugh



Whereas, "fast flux" DNS changes are increasingly being used to commit
crime
and frustrate law enforcement efforts to combat crime, with criminals
rapidly modifying IP addresses and/or nameservers in effort to evade
detection and shutdown of their criminal website;

Whereas, the Security and Stability Advisory Committee has reported on this
trend in its Advisory SAC 025, dated January 2008:
http://www.icann.org/committees/security/sac025.pdf/

Whereas, the SSAC Advisory describes the technical aspects of fast flux
hosting, explains how DNS is being exploited to abet criminal activities,
discusses current and possible methods of mitigating this activity, and
recommends that appropriate bodies consider policies that would make
practical mitigation methods universally available to all registrants,
ISPs,
registrars and registries,

Whereas, the GNSO is likely an appropriate party to consider such policies

The GNSO Council RESOLVES:

ICANN Staff shall prepare an Issues Report with respect to "fast flux" DNS
changes, for deliberation by the GNSO Council.  Specifically the Staff
shall
consider the SAC Advisory, and shall outline potential next steps for GNSO
policy development designed to mitigate the current ability for criminals
to
exploit the DNS via "fast flux" IP or nameserver changes.