[ga] [Fwd: Re: [At-Large] e-Crime and Abuse of the DNS Forum: a global perspective]

["Jeffrey A. Williams" <jwkckid1@xxxxxxxxxxxxx>]

All,

  As an FYI

-------- Original Message --------
Subject: Re: [At-Large] e-Crime and Abuse of the DNS Forum: a global
perspective
Date: Mon, 02 Mar 2009 17:54:23 -0800
From: "Jeffrey A. Williams" <jwkckid1@xxxxxxxxxxxxx>
Organization: IDNS and Spokesman for INEGroup
To: At-Large Worldwide <at-large@xxxxxxxxxxxxxxxxxxxxxxx>,"Peretti,
Kimberly Kiefer" <Kimberly.Peretti@xxxxxxxxx>,Peter Dengate Thrush
<barrister@xxxxxxxxxxxxxxx>,DOC/NTIA ICANN Rep <aheineman@xxxxxxxxxxxx>
CC: ccNSO Council
<ccnso-council@xxxxxxxxx>,ccnso-members@xxxxxxxxx,"council@xxxxxxxxxxxxxx"
<council@xxxxxxxxxxxxxx>,liaison6c <liaison6c@xxxxxxxxxxxxxx>,Steve
Crocker <steve@xxxxxxxxxxxx>, jun@xxxxxxxxxx,Louis Lee
<louie@xxxxxxxxxxx>, adiel@xxxxxxxxxxx,Janis Karklins
<janis.karklins@xxxxxxxxx>,Kurt Pritz <kurt.pritz@xxxxxxxxx>,Paul Levins
<paul.levins@xxxxxxxxx>, GAC Rep <ssene@xxxxxxxxxxxx>,"Brendler, Beau"
<Brenbe@xxxxxxxxxxxx>,Chuck Gomes <cgomes@xxxxxxxxxxxx>, DHS info
<info@xxxxxxxxxxx>,Frederic Teboul <frederic.teboul@xxxxxxxxx>,FTC OIG's
office <OIG@xxxxxxx>, icann legal <jeffrey@xxxxxxxxx>,Kevin Wilson
<kevin.wilson@xxxxxxxxx>,Kieren McCarthy <kieren.mccarthy@xxxxxxxxx>,Leo
Vegoda <leo.vegoda@xxxxxxxxx>,Maria Farrell
<maria.farrell@xxxxxxxxx>,"matthias.langenegger@xxxxxxxxx"
<matthias.langenegger@xxxxxxxxx>,Nick Ashton-Hart
<Nick.Ashton-Hart@xxxxxxxxx>,Roberto Gaetano <roberto@xxxxxxxxx>,Rudi
Vansnick <rudi.vansnick@xxxxxxx>, Tim Ruiz
<tim@xxxxxxxxxxx>,fbi.dallas@xxxxxxxxxx
BCC: Bill Silverstein <icann-list@xxxxxxxxxxxxx>,Avri Doria
<avri@xxxxxxx>,Bret Fausett <bfausett@xxxxxxxxxxxxxxxx>,Danny Younger
<dannyyounger@xxxxxxxxx>,"Darlene Thompson," <DThompson@xxxxxxxxx>,Dessi
Pefeva <dpefeva@xxxxxxx>,Dharma Dailey <dharma@xxxxxxxxxxxxxxxxx>,"Dr.
Joe Baptista" <baptista@xxxxxxxxxxxxxx>,Erick Iriarte Ahon
<faia@xxxxxxxxxxxxxxxxx>,Evan Leibovitch <evan@xxxxxxxxx>,Fatimata Seye
Sylla <fsylla@xxxxxxxxx>,Hong Xue <hongxueipr@xxxxxxxxx>, Hovav Shacham
<hovav@xxxxxxxxx>,Izumi AIZU <iza@xxxxxxx>, Jaap Akkerhuis
<jaap@xxxxxxxxxxxx>,Jacques Berleur <jberleur@xxxxxxxxxxxxxxxx>,JFC
Morfin <jefsey@xxxxxxxxxx>, John L <johnl@xxxxxxxx>,"José Ovidio
Salgueiro A." <jsalgueiro@xxxxxxxxx>,Karl Auerbach
<karl@xxxxxxxxxxxx>,"Karl E. Peters" <kpeters@xxxxxxxxxxx>,marilyn cade
<marilynscade@xxxxxxxxxxx>,"Michael Froomkin - U.Miami School of Law"
<froomkin@xxxxxxxxxxxxx>,Michele Neylon <michele@xxxxxxxxxxxxx>,Milton L
Mueller <mueller@xxxxxxx>,"Nevett, Jonathon"
<jnevett@xxxxxxxxxxxxxxxxxxxx>,Nguyen Thu Hue
<huenguyen@xxxxxxxxx>,Norbert Klein <nhklein@xxxxxxx>,Olivier MJ
Crepin-Leblond <ocl@xxxxxxx>,Sivasubramanian Muthusamy
<isolatedn@xxxxxxxxx>,Sylvia Caras <sylvia.caras@xxxxxxxxx>,"Sébastien
Bachollet" <sebastien.bachollet@xxxxxxx>,Veni Markovski <veni@xxxxxxxx>,
Vittorio Bertola <vb@xxxxxxxxxx>,Wendy Seltzer
<wendy@xxxxxxxxxxx>,William Drake
<william.drake@xxxxxxxxxxxxxxxxxxxx>,Wim Vandevelde
<wim-vandevelde@xxxxxxx>,Wolfgang
<wolfgang.kleinwaechter@xxxxxxxxxxxxxxxxxxxxxxx>,WWWhatsup
<joly@xxxxxxxxxxxx>, YJ Park <yjpark21@xxxxxxxxx>
References:
<aafc0f850903031414y450499ddh39021d1f9c845a47@xxxxxxxxxxxxxx>

Denise and all,

  Thank you for the update.

  I wonder, as the documentation you provided in your update didn't
include much in the way of specifics, if the e-Crime will be identifying
known perpetrators, such as Afilias, ICANN itself, Corenic, Nuestar,
markmonitor, GoDaddy, GOV.NU.CA, hovtek.com.au, and numerous
others?  My guess is no, as such would be of course particularly
embarrassing to ICANN.

  So I can only guess that this DNS forum will be yet another of ICANN's
many orcastrated fables I presume...

  BTW it you need supporting documentation, please don't hesitate
to request same, I be more than happy to provide.


Denise Michel wrote:

> Greetings.
>
> The main session of "e-Crime and Abuse of the DNS Forum: a global
> perspective" scheduled for Wednesday, March 4, 14:00-18:00 in
> Don-Alberto 2-4 (Main Room), will be scribed, and the transcript and
> all presentations will be publicly posted at
> <http://mex.icann.org/node/2653>.  Included below and attached in Word
> is an updated agenda.  I know that overlapping meetings have been
> scheduled and not all interested community members will be able to
> attend the Forum, but rest assured that all available information will
> be publicly posted, including the results of the break-out sessions.
>
> Regards,
> Denise
>
> Denise Michel
> ICANN Vice President
> Policy Development
> -----------------------------------
>
> e-Crime and Abuse of the DNS Forum: a global perspective
>
> Organized by ICANN Staff in Cooperation with the At-Large Summit
>
> Wednesday, March 4
> 14:00-18:00
> Hotel Sheraton Centro Historico
> Don-Alberto 2-4 Conference Room
>
> The Forum will provide participants with an opportunity to discuss
> numerous global activities and issues related to e-Crime and DNS abuse
> that involve a broad array of international stakeholders.  While not
> all of these issues fall within ICANN's narrow mission, the Forum is
> intended to facilitate public dialogue and working relationships on
> e-Crime and DNS abuse among members of the global Internet community,
> as requested by the ICANN community.
>
> Welcome   Alejandro Pisanty (former Director, ICANN Board; National
> University of Mexico) Time:  14:00 ? 14:10
>
> Alejandro Pisanty will provide an introduction to the Forum including
> its format, aims, and objectives.
>
> Session 1. The e-Crime Landscape         (Time: 14:10 ? 15:03)
>
> Moderator: Cheryl Langdon-Orr (Chair, At-Large Advisory Committee) 
> (14:10-14:13)
>
> Panel: Beau Brendler (Consumer Reports WebWatch Project); Fred Felman
> (MarkMonitor); and Jeffrey Bedser (Internet Crimes Group)
>
> Introduction to E-Crime (20 minutes) (14:13 ? 14:33)
> Beau Brendler will provide an overview of the manner in which e-Crime
> affects consumers as well as discuss activities that aim to educate
> the public regarding e-Crime risks.  Fred Felman will review recent
> e-Crime trends, and highlight types of harms to end-users.
>
> Sizing and Scoping e-Crime (20 minutes) (14:33-14:53)
> Jeffrey Bedser will describe the e-Crime ecosystem and explain how
> organized crime uses the Internet and the DNS to facilitate criminal
> acts against end-users. Jeffrey will also discuss emerging legal
> efforts that focus on protecting end-users against Internet-based
> crime. Jeffrey will use the results of extensive attack traffic, DNS,
> and domain name data analysis to illustrate that e-Crime is able to
> exploit resources from virtually any user and provider in the global
> Internet. He will describe how criminal attack network activity is
> distinguished from legitimate (production) traffic. Jeffrey will also
> show the hotspots for bot and malware activity and where domain names
> are used to abet e-crime are registered.
>
> Audience Questions (10 minutes) (14:53-15:03)
>
> Session 2. Criminal Attacks and Abuse Response Today   (Time: 15:03-16:11)
>
> Moderator: Greg Rattray (Chief Internet Security Advisor, ICANN) Time:
> 15:03 ? 15:06
>
> Panel:  Rod Rasmussen (Internet Identity); Tim Ruiz (GoDaddy), Greg
> Aaron (Afilias), Law Enforcement (TBD); Vanda Scartezini (At-Large
> Advisory Committee); Jeff Neuman (NeuStar); Oscar Robles-Garay
> (NIC.mx)
>
> Case studies in global criminal attacks (20 minutes) (15:06-15:26)
> Rod Rasmussen will describe the chronology of events leading to the
> discoveries and cessations of two noteworthy security incidents.  He
> will describe both the parties involved in, and the events leading up
> to, the disconnection of the McColo hosting provider, and the
> sustained disruption of Srizbi bot communications with their command
> and control servers by preventing the automated registrations of
> botnet domains.  Rod will describe the events surrounding the attack
> against the e-billing company, CheckFree, through its domain names,
> the immediate effects, related phishing of registrars, and the
> prospects for future, similar attacks against the financial sector and
> end-users.
>
> Abuse Response Today ? (30 minutes) (15:26-15:56)
> The speakers will describe their respective roles in responding to,
> and acting upon, criminal complaints where domain names are used to
> abet criminal activities, and how to protect legitimate end-users from
> erroneous shut-downs (false positives).  A law enforcement expert will
> describe the role of the private sector in cooperating with law
> enforcement agencies, and in proactively responding to E-crime so as
> to protect consumers.
>
> Audience Questions (15 minutes) (15:56-16:16:11)
>
> Session 3.  Role of ICANN Stakeholders and Staff in Responding to
> e-Crime (45 minutes) Time: 16:11-17:01
>
> Moderator:  Lyman Chapin (former Director, ICANN Board) (16:11-16:14)
>
> Panel: Jon Nevett (Network Solutions); Garth Bruen (Knujon); Steve
> Metalitz (Intellectual Property Constituency); David Giza (ICANN
> Compliance Office); Roelof Meijer (SIDN); Adam Palmer (Public Interest
> Registry); Rudi Vansnick (ISOC.be); Marc Ottawa (Royal Canadian
> Mounted Police); Andy Steingruebl (PayPal); Tony Harris (Cabase)
> (16:14-16:56)
>
> The speakers will describe how current ICANN gTLD and ccTLD policies
> and contractual obligations of registries and registrars help combat
> E-crime.  The role of ICANN?s Compliance Office in reinforcing these
> efforts, such as in the areas of WHOIS accuracy, and registrar breach
> notices, will be explained.  The speakers will also discuss the
> efforts among industry groups to develop voluntary guidelines and
> share data to enhance the private sector?s responses to e-Crime.
>
> Audience Questions (15 minutes) (16:56 ? 17:01)
>
> Next Steps ? e-Crime Break-Out Sessions (60 minutes) Time: 17:01 ? 18:01
>
> Instructions:   Denise Michel, ICANN Vice President, Policy Development
>
> The public will have an opportunity to participate in further detailed
> discussion and exchange of information by joining one of several
> break-out sessions on specific issues moderated by the individuals
> identified below:
>
> ?       Law Enforcement and ccTLDs (Marc Moreau and Erick Iriarte Ahon)
> ?       Consumer Protection  in Existing and New TLDs (Beau Brendler and
> Holly Raiche, Executive Director, ISOC-AU)
> ?       The Role of ICANN (Jon Nevett, Kristina Rosette, and Doug Brent,
> Chief Operating Officer, ICANN)
> ?       e-Crime in Latin America  - conducted in Spanish  (Vanda Scartezini
> and Alejandro Pisanty)
>
> The moderators of each break-out session will summarize any suggested
> next steps and recommendations from their respective group during the
> Public Forum.
>
>   ------------------------------------------------------------------------
>                                                     Name: Ecrime and Abuse of 
> the DNS 3-1-09-Script.doc
>    Ecrime and Abuse of the DNS 3-1-09-Script.doc    Type: WINWORD File 
> (application/msword)
>                                                 Encoding: base64
>
>   ------------------------------------------------------------------------
> _______________________________________________
> At-Large mailing list
> At-Large@xxxxxxxxxxxxxxxxxxxxxxx
> http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.icann.org
>
> At-Large Official Site: http://atlarge.icann.org