ICANN participation

Opening and Introduction
Steve Crocker, SSAC Chair

This is the public presentation of the work of the Security and Stability Advisory Committee. The public is invited to interact with SSAC members with questions and comments.

Update on SSAC's DNSSEC Statement (SAC026)
Dave Piscitello, ICANN

SSAC suggested seven recommendations in its statement on the deployment of DNSSEC. A brief summary of the status of each will be presented.

Protecting High Value Domain Names
Dave Piscitello, ICANN

SSAC is conducting a study to examine existing and candidate measures to protect high value domain names from attack. This is a preliminary summary of a work in progress.

Registrar Phishing Threat
Ram Mohan, Afilias

Phishers are beginning to move from attacking domains directly to attacking registrars where the value to the phisher is much greater. We will discuss threats, issues, and potential mitigation strategies for registrars to consider.

Addressing DNS Vulnerabilities
Kim Davies, IANA

There has been a lot of media attention on the “flaws” or shortcomings of the DNS, along with some discussion of various mitigation strategies. We will summarize briefly the current status with particular attention to short-term actions versus long-term actions.

DNS Fast Flux
Dave Piscitello, ICANN

Bad actors rapidly change name server records with short time-to-live values to evade discovery. We will summarize the follow up analysis that continues to be conducted and the resulting evolution of the original findings.

ICANN Security, Stability and Resiliency Efforts
Greg Rattray, ICANN

ICANN is developing its key strategic issues and plans with respect to Internet security and
stability. This will be a discussion of a work in progress.

This meeting was used as a testbed for a more interactive approach that ICANN is trialling. The new approach provided a scribe feed, audio, video, updated presentation slides and a chatroom all in one window using Adobe's Connect software.

The experiment is an effort to see if this sort of technology could serve a useful role in future ICANN meetings, so we would be very grateful if people used it if they could send any feedback on the process to either ICANN's head of IT, Roman Pelikh (roman.pelikh@icann.org) or to its general manager of public participation, Kieren McCarthy (kieren.mccarthy@icann.org).

The archive for this session is available at: http://icann.na3.acrobat.com/p88047362/