Security and Stability Advisory Committee (SSAC)

What is the SSAC?

The Security and Stability Advisory Committee advises the ICANN community and Board on matters relating to the security and integrity of the Internet's naming and address allocation systems. This includes operational matters (e.g., matters pertaining to the correct and reliable operation of the root name system), administrative matters (e.g., matters pertaining to address allocation and Internet number assignment), and registration matters (e.g., matters pertaining to registry and registrar services such as WHOIS). SSAC engages in ongoing threat assessment and risk analysis of the Internet naming and address allocation services to assess where the principal threats to stability and security lie, and advises the ICANN community accordingly.

How does SSAC Operate?

SSAC projects may originate internally, or they may be requested by ICANN, the ICANN Board of Advisors, and the ICANN Ombudsman. Registries, Registrars, and Registrants and members of the ICANN community may request the committee to consider matters that are thought to affect the security and stability of any aspect of Internet name, address and numbering system administration and operation. SSAC makes reports on its activities in a public forum at ICANN meetings (see SSAC Presentations). SSAC assigns a steward for each project. Stewards assist the chairman by overseeing activities associated with a project, and may act as rapporteurs on behalf of SSAC at ICANN meetings and other public forums.

How does SSAC report its findings and recommendations?

SSAC documents its findings and recommendations in one of three forms.

  • Advisories address a security or stability matter in a timely manner, with sufficient background information to appraise the community of the issue or threat. Advisories typically include recommended actions to remedy a problem, or reduce a threat. Advisories may also recommend subsequent action by SSAC, ICANN, or a broader community involved with Internet security.
  • Comments are responses to public calls for comments by ICANN, the ICANN Board of Directors, ICANN committees, and committee task forces.
  • Reports provide in-depth analyses of a topic and may recommend specific actions and policy recommendations for ICANN's consideration.

Tell me about the history of the SSAC

At its November 2001 meeting, which focused on security issues, the ICANN Board directed the President "to appoint a President's standing committee on the security and stability of the Internet's naming and address allocation systems. The President is directed to develop a proposed charter, with at least a focus on risk analysis and auditing thereof, in consultation with the President's standing committee, and to submit it to the Board for its approval."

At its meeting on 14 March 2002, the ICANN Board approved the charter of the ICANN Committee on Security and Stability.

On 13 May 2002, the ICANN Board converted the President's Committee on Security and Stability to the Security and Stability Advisory Committee.

Who are the Members of the Committee?

Dr. Stephen Crocker is chair of the Security and Stability Advisory Committee.

Dave Piscitello is the ICANN Senior Security Technologist

  • Alain Aina (Consultant)
  • Jaap Akkerhuis (NLnet Labs)
  • Jeffrey Bedser (Internet Crimes Group)
  • Lyman Chapin (Interisle), RSTEP Liaison
  • KC Claffy (CAIDA)
  • Steve Conte (ICANN)
  • Patrik Faltstrom (Cisco Systems)
  • Robert Guerra (Privaterra), ALAC Liaison
  • Rodney Joffe (Neustar)
  • Olaf Kolkman (NLNet Labs), IAB Point of Contact
  • Mark Kosters (ARIN)
  • Warren Kumari (Google)
  • Matt Larson (VeriSign)
  • Danny McPherson (Arbor Networks, Inc.)
  • Ram Mohan (Afilias)
  • Russ Mundy (SPARTA, Inc.)
  • Frederico Neves (NIC.br)
  • Ray Plzak (ARIN), Vice-Chair
  • Ramaraj Rajashekhar (Sequoia Capital, India)
  • Barbara Roseman IANA Liaison
  • Mike St. Johns
  • Shinta Sato (JPRS)
  • Mark Seiden (Yahoo!)
  • Doron Shikmoni (ForeScout, ISOC-IL)
  • Bruce Tonkin (Melbourne IT)
  • Stefano Trumpy, GAC Liaison
  • Paul Vixie (ISC)
  • Rick Wesson (Support Intelligence)
  • Suzanne Woolf (ISC)

Support for the committee is provided by Jim Galvin (eList eXpress).

How do I Contact the Committee?

Comments and other communications to the committee should be sent by e-mail to Steve Crocker (Chair), Dave Piscitello (Fellow), or Jim Galvin (Support).