IGF 2020 WS #317 DNS-Abuse in the Age of COVID-19: Lessons Learned

Information

Session

Time:

Monday, 9 November, 2020 - 06:00 to 07:30 UTC

Add to Calendar

Room:

Room 2

Thematic Track:

Trust

Topic(s):

Cybersecurity Best Practices
DNS Abuse
DNS Security

Organizer 1: Adiel Akplogan, ICANN
Organizer 2: Kathryn (Mandy) Carver, ICANN
Organizer 3: Laurent Ferrali, ICANN
Organizer 4: Adiel Akplogan, ICANN
Organizer 5: Vera Major, ICANN

Speaker 1: David Conrad, Technical Community, Western European and Others Group (WEOG)
Speaker 2: Adiel Akplogan, Technical Community, Western European and Others Group (WEOG)
Speaker 3: John Crain, Technical Community, Western European and Others Group (WEOG)

Additional Speakers:

We would like to add additional speakers to the session. Howeve, we are unable to confirm at this time as we would need to know the dates of the IGF before reaching out to new speakers.

Format:

Round Table - Circle - 90 Min

Online duration reset to 60 minutes.

Description:

As the global community strains under the weight of the coronavirus pandemic, cyber criminals are taking advantage, attacking the most critical institutions and playing on fears and anxieties in campaigns of extortion and fraud. The purpose of the session is to inform the community about the work done and lessons learned to prevent that abuse. The best way to support practical outcomes and substantive policy discussions is to give participants a grounding in the technical aspects of the DNS and how to identify abuse. By increasing understanding of the concepts of DNS Abuse and the use of DNS in phishing and Malware and policy makers can learn how to mitigate the abuse and protect the users of the DNS.

Issues:

The technical underpinnings of the Internet and the operation of the DNS, What is meant by the term DNS abuse and how is the DNS used in malware and phishing attacks and how these fraud and extortion campaigns pivot to use whatever event or cause is most timely. The lessons learned from the Covis-19 setting are applicable to similar bad acts taking advantage of seasonal events, natural disasters, or common themes and interests. The tools developed to combat DNS abuse in the pandemic setting will be useful for combatting abuse and fraud campaigns regardless of theme

Policy Question(s):

· What actions can users and other stakeholders take to mitigate the impact of DNS fraud and abuse? · How can policy and collaboration contribute towards the protection, prevention and defense against cyber threats?

Expected Outcomes:

• Increase understanding of the concepts of DNS Abuse and the use of DNS in phishing and Malware and how to mitigate the abuse and protect the users of the DNS. • Increased awareness of the work of and support for the COVID-19 Cyber Threat Coalition (CTC) and the COVID-19 Cyber Threat Intelligence League (CTI League) • Increased participation in the Threat Coalition and Threat Intelligence League. • Sharing of best practices

Relevance to Internet Governance: Identifying and preventing DNS abuse is at the very core of trusted operation of the Internet and therefore to the development and application of shared principles, norms, rules and decision-making procedures impacting the use of the Internet.

Relevance to Theme: Especially during the strain of a global pandemic the world needs trusted communication and information sharing channels. Cybercriminals are taking advantage of the most critical institutions and playing on fears and anxieties in campaigns of extortion and fraud. Identifying and exposing these threats and informing the global community about how to protect themselves is critically important to maintaining trust in the Internet.

Moderator:

Kathryn (Mandy) Carver, Technical Community, Western European and Others Group (WEOG)

Online Moderator:

Laurent Ferrali, Technical Community, Western European and Others Group (WEOG)

Rapporteur:

Vera Major, Technical Community, Western European and Others Group (WEOG)

Discussion Facilitation:

The session will include an introduction to the concepts and issues with examples of actions and policies used successfully in different locations. The audience will be invited to share their experiences implementing policies. We intend each segment to be 45 minutes.

Online Participation:

Usage of IGF Official Tool.

SDGs:

GOAL 9: Industry, Innovation and Infrastructure
GOAL 16: Peace, Justice and Strong Institutions
GOAL 17: Partnerships for the Goals

Reference Document

Main menu

IGF 2020 WS #317 DNS-Abuse in the Age of COVID-19: Lessons Learned

Information