• About the Institute
  • Innovation
  • Education
  • Collaboration
  • Events
  • Blog
  • Contact
  • Events
  • Contact
  • Blog
  • NetBeacon
  • DNSAI Compass
DNS Abuse Institute

ABOUT US

Discover who we are and what we do

INNOVATION

Learn about our innovative solutions to strengthen the DNS.

EDUCATION

Access our resources and discover our projects and research.

COLLABORATION

Learn how to join, contribute, and participate!

Article

  • Home
  • Blog
  • Article
  • Measuring DNS Abuse: Our First Report

Measuring DNS Abuse: Our First Report

  • Posted by Rowena Schoo
  • Categories Article, DNSAI Compass, News
  • Date September 16, 2022

In May 2022, we wrote about kicking off our work to measure DNS Abuse. We’re proud to announce today that we have launched our first report and gone live with our measurement initiative: DNSAI Compass (formerly DNSAI Intelligence).

Our priorities for this initiative are: 

  • Transparency: The methodology that collects, cleans, and aggregates the data must be as transparent as possible. To the extent that anyone should wish to, they could replicate the process. 
  • Credibility and Independence: We aim to have an academically robust and independent approach, separate from commercial interests. 
  • Accuracy and Reliability: The goal of these reports is to enable focused conversations, and to identify opportunities for abuse reduction.  The data needs to be of high enough quality to serve as the foundation for meaningful changes to the ecosystem.


To ensure the report is independent, reliable, and uses academically robust methodology we are working with an experienced independent third party to lay out the methodology and conduct the data gathering. The technical analysis for this project is performed by
KOR Labs, led by Maciej Korczynski from Grenoble INP-UGA.

The intention is to establish a credible source of metrics for addressing DNS Abuse. We hope this will enable focused conversations, and identify opportunities for reducing abuse across the DNS ecosystem. 

We hope future iterations of this report create an opportunity to celebrate and recognize good practice, as well as shine a spotlight on potential for areas of improvement in the industry. We hope to understand through these reports which factors, policies, and processes are effective, and empower the industry with evidence. 

DNS Abuse impacts everyone. We want to use this understanding to improve the overall health of the DNS ecosystem. Fundamentally, we want to prevent or quickly mitigate harm to end users, businesses, governments, civil society organizations, public services, and the general public while preserving the benefits and principles of an open Internet. 

While we expect to offer much greater levels of granularity in our upcoming reports, our first report focuses on higher level aggregate data from May, June, and July 2022. We have this higher level approach for this initial report to allow for further data collection and to gather feedback as to what would be most helpful in our future reports.

The interactive dashboards are available on our website and updated monthly, and you can download our first monthly report here.

One of the focuses of the data we gather is abuse up-times or “time to live.” This is an important metric because it explains how long DNS Abuse is present on a domain before the harm is mitigated. In order to measure abuse up-times, we track each domain name for 30 days which means the data in our reporting is a month behind. 

In creating these reports, we have optimized for accuracy and reliability. This means that some of our numbers will necessarily be lower than some other reports on phishing and malware prevalence which may look to the URL level rather than the domain name level. 

Because our data collection efforts are just beginning, we do not attempt to make any conclusions about the data at this time. We look forward to reviewing data as time goes on and patterns cement into trends. However, we do offer commentary on how our methodology  captures data and will provide a foundation for understanding this complex problem going forward. 

We encourage all readers to delve into the full report, look at the interactive charts, and let us know your thoughts. 

We know it will take time to get this right and we’re always interested to hear views and ideas from the community.  After all, we are here to support the DNS Community and make it better equipped to tackle DNS Abuse.

The DNS Abuse Institute will periodically publish reports on DNSAI Compass. 

Tag:Abuse Reporting, DNS Abuse, DNS Abuse Institute, DNSAI Intelligence

  • Share:
author avatar
Rowena Schoo

Previous post

Best Practice: Abuse Reporter Expectation Management
September 16, 2022

Next post

DNSAI Newsletter November 2022
November 1, 2022

You may also like

注册商和注册机构的《通用滥用政策》
30 August, 2023

最近,一位注册商联系我,他们真切关注采取更多措施来解决 DNS 滥用的问题,但不确定应该从哪里开始着手。DNS 滥用是一个复杂的问题,没有明确的切入点来着手解决。不止这一家注册商,许多注册机构和注册商越来越担心滥用行为,并需要帮助来着手解决这一问题。 本文是三部分系列文章的第一篇,该系列文章旨在为制定反滥用实践的关键组成部分提供合理、简明的介绍。第一篇文章致力于提供合理的法律依据,或者说基本的 DNS 滥用政策,以解决滥用问题。接下来的两篇文章将讨论管理 DNS 滥用的有效手段以及实际缓解程序。 本政策是与互联网和司法管辖区政策网络 (I&J) 共同制定的,我们对他们的贡献和支持表示感谢。I&J 在这一领域有很多非常好的内容,其中包括他们的 Toolkit: DNS Level Action to Address Abuses(工具包:DNS 层面应对滥用的行动),我建议任何对减少滥用感兴趣的人士都要读一下。DNS 滥用研究所也是 I&J 域名联络小组的积极参与者。  DNS 滥用具体政策 大多数注册商都会在其网站上发布某种形式的“服务条款”或“可接受的使用政策”。这些政策条款通常赋予注册商出于多种原因而终止服务的自由裁量权。 发布和采用特定的滥用政策提供了几个优势,主要是在于明确性和保护性方面。明确的滥用政策以及对其执行的声誉,可以对不良行为者使用该服务构成威慑。如果注册商或注册机构的相关政策涵盖了滥用行为,那么在对滥用行为采取行动时也会得到更有力的法律保护。  在我们详细介绍通用政策如何发挥作用之前,我想先说明一下它是如何制定的。首先,我们专门制定了这一通用政策,这样所有注册商或注册机构都可以根据具体情况来使用/修改/实施此政策。这就是为什么该政策采用创意共享许可,特别是 CC By 4.0 license(CC By 4.0 许可)的原因,这些许可允许任何人在注明 DNSAI 的情况下分享和调整材料。其次,我们正在将其转换为 Markdown 格式并将存放在 …

dnsaicompassinset
A New Phase of Measuring DNS Abuse
9 June, 2023
2022 DNSAI Annual Report Image
DNSAI Releases 2022 Annual Report
11 April, 2023

Search

Categories

  • Article
  • Best Practice
  • Bulletin
  • DNSAI Compass
  • News
  • Newsletter
  • Report
  • Research
  • Resources
logo-public-interest-registry-dns-abuse-institute

The DNS Abuse Institute

Providing innovative solutions and information that ensure the DNS is safe and secure worldwide.

Institute

  • About the Institute
  • Innovation
  • Education
  • Collaboration

Quick Links

  • Blog
  • Contact
  • Privacy Policy
  • NetBeacon
  • DNSAI Compass

Connect With Us

Newsletter

Get the latest DNS Abuse Institute news delivered to your inbox.


PIR will only use the personal data you submit via this form to contact you regarding the DNS Abuse Institute Newsletter. The information will not be used for any other purpose.

Please be aware that if you do not consent to the use of your email for this purpose we will not be able to fulfill your request.

Opt-In *

* indicates required

© 2022 Public Interest Registry. All rights reserved.