Logo
ICANN
ICANN
Filtered Search

Are you sure you want to sign out from http://www.icann.org?

If you want to sign out from both http://www.icann.org and ICANN Account, click here.

ICANN 博文

敬请阅读 ICANN 的博文，了解最新政策制定活动和区域事务等等。

ICANN 完成了对 DNS 安全建议的初始评估

2022 年 12 月 14 日
作者：
Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research

Samaneh is a reporting to John Crain, Chief Security, Stability & Resiliency Officer and is part of the Office of CTO (OCTO) group. She is based in ICANN’s Europe Region and will be working remotely from the Netherlands. As the SSR Specialist, Samaneh works in close coordination with other ICANN organization functions to implement ICANN’s Security, Stability and Resiliency strategies. Samaneh carries out research on DNS security and abuse. She also represents ICANN on matters relating to the SSR of the Internet’s system of unique identifiers within ICANN’s remit as well as helping to develop technical work, positions and produce materials related to the administration of those identifiers from an SSR perspective.

Samaneh is from a multi-disciplinary background. While she is an Electronics Engineer by training, she studied Engineering and Policy Analysis for her masters. She holds a PhD degree in Internet Security and Data Analytics from the Delft University of Technology in the Netherlands. She worked as a Post-Doctoral researcher at the same university where she did research on banking security and underground markets utilizing advanced statistical techniques and machine learning.

She has collaborated with other research teams as a visiting scholar; at KU Leuven, DistriNet Research Group she worked on Internet measurements to estimate web vulnerabilities and measure patching practices of hosting servers. Additionally, she worked with scholars from the security and privacy lab at University of Innsbruck on designing abuse metrics that can reliably measure security performance of Internet identifiers.

Samaneh has authored publications on web security, cyber security, Internet measurements, underground economy, and development of security metrics design using advance statistical methods.

Samaneh speaks English, Farsi, Dutch and has basic knowledge in Arabic. She is a big fan of board games. In her free time, she runs, plays tennis, and piano.

 

我很高兴地宣布 ICANN 最近完成了针对域名系统安全协调计划技术研究组 (Domain Name System Security Facilitation Initiative Technical Study Group, DSFI-TSG) 在其《最终报告》中提出的 12 项建议进行的可行性评估。评估发现，所有建议都符合 ICANN 的战略目标，与 ICANN 的运营规划保持一致，且没有安全性、稳定性或弹性方面的问题。

DSFI-TSG 审查了域名系统 (Domain Name System, DNS) 的情况，以了解 DNS 在哪些方面直接面临风险，或被用来攻击互联网上的其他系统。根据审核结果，DSFI-TSG 就其发现的现有措施的不足之处以及 ICANN 组织可以改善 DNS 的安全性和稳定性的领域提出了建议。这些建议根据作用类型和可采取行动而提出，涉及运营改进、研究、筹款、教育和宣传等等。

主题问题专家们根据以下重要评估标准及其影响，评估了实施每项建议的可行性：

  • 战略上：建议实施是否能与 ICANN 的战略目标、价值和优先事项相一致。
  • 运营上：实施工作如何与 ICANN 的运营规划如何保持一致。
  • 安全、稳定与弹性 (SSR)：建议范畴是否会引起有关安全、稳定和弹性的任何关切或问题。
  • 财政上：对 ICANN 组织、社群和公众的潜在财务影响。
  • 合同和法律上：任何需要考虑的合同和法律义务及其潜在影响。
  • 建议实施方案：根据上述评估，实施建议是否可行，若可行，则对关键环节进行总结。

ICANN 计划就可行性评估的结果与相关利益相关方进行接触，进一步确定每项建议的实施要求范畴。鉴于此，在本流程中，那些被认为是可行和可实施的建议将进入最后的实施阶段，这包括制定实施设计和确定优先级。

背景介绍

该项目与 ICANN 的《2021 至 2025 财年战略规划》以及总裁兼首席执行官的工作目标保持一致。这包括：

  • 战略宗旨：“通过与利益相关方合作来强化 DNS 的协调性，提高相关各方维护 DNS 安全性与稳定性的共同责任意识；”
  • 战略宗旨：“支持并提升利益相关方主动、明智且有效的参与（特别是涉及安全性和稳定性的讨论）。”
  • ICANN 董事会批准的 2023 财年目标中的第六个目标要求，“DSFI-TSG 提议的潜在实施流程。”

2020 年 5 月，马跃然 (Göran Marby) 委托该技术研究组，并为它取了个很棒的缩写名称 DSFI-TSG。该研究组的设立是对公共 DNS 基础设施经历的重大网络攻击所做出的回应，例如：海龟劫持和 DNS 间谍事件。

如您所示，我们已经取得了很大成就，确定了方案来保证公共 DNS 基础设施更加安全、稳定和富有弹性。ICANN 组织致力于提高透明度，我们将随时向大家通报重要的工作进展。最后，我们还准备在假期结束后对该项目进行重新推广，让更多的人能够了解它。

Authors

Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research
Samaneh Tajalizadehkhoob

Samaneh Tajalizadehkhoob

Director, Security, Stability and Resiliency Research

Samaneh is a reporting to John Crain, Chief Security, Stability & Resiliency Officer and is part of the Office of CTO (OCTO) group. She is based in ICANN’s Europe Region and will be working remotely from the Netherlands. As the SSR Specialist, Samaneh works in close coordination with other ICANN organization functions to implement ICANN’s Security, Stability and Resiliency strategies. Samaneh carries out research on DNS security and abuse. She also represents ICANN on matters relating to the SSR of the Internet’s system of unique identifiers within ICANN’s remit as well as helping to develop technical work, positions and produce materials related to the administration of those identifiers from an SSR perspective.

Samaneh is from a multi-disciplinary background. While she is an Electronics Engineer by training, she studied Engineering and Policy Analysis for her masters. She holds a PhD degree in Internet Security and Data Analytics from the Delft University of Technology in the Netherlands. She worked as a Post-Doctoral researcher at the same university where she did research on banking security and underground markets utilizing advanced statistical techniques and machine learning.

She has collaborated with other research teams as a visiting scholar; at KU Leuven, DistriNet Research Group she worked on Internet measurements to estimate web vulnerabilities and measure patching practices of hosting servers. Additionally, she worked with scholars from the security and privacy lab at University of Innsbruck on designing abuse metrics that can reliably measure security performance of Internet identifiers.

Samaneh has authored publications on web security, cyber security, Internet measurements, underground economy, and development of security metrics design using advance statistical methods.

Samaneh speaks English, Farsi, Dutch and has basic knowledge in Arabic. She is a big fan of board games. In her free time, she runs, plays tennis, and piano.

 

您还可能喜欢