| CARVIEW |
Select Language
HTTP/2 302
date: Mon, 14 Jul 2025 19:53:40 GMT
content-type: text/html; charset=utf-8
location: https://archive.icann.org/presentations/crocker-dnssac-report-shanghai-30oct02.ppt
x-ratelimit-remaining: 195
x-ratelimit-requested-tokens: 5
x-ratelimit-burst-capacity: 200
x-ratelimit-replenish-rate: 100
x-frame-options: SAMEORIGIN
cache-control: public, max-age=14400
referrer-policy: origin-when-cross-origin
content-security-policy: frame-ancestors *.icann.org
strict-transport-security: max-age=48211200; preload
cf-cache-status: MISS
expires: Mon, 14 Jul 2025 23:53:40 GMT
set-cookie: __cf_bm=WRDmt7aZDqug.thlhHaFvH72RNFe2fCYg_QDMkNVSOM-1752522820-1.0.1.1-fzPeP5xv5LlRVCjfiUJpWNZw6Coi8JlZcfAnoGrJ5CCjvRzsyEUsUh0dxcSjLFNSqcWwY1SfKn0GYkP0Z3ra.WTO98OhDS7Hqx47yquCDEo; path=/; expires=Mon, 14-Jul-25 20:23:40 GMT; domain=.icann.org; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 95f391479be8f424-BLR
HTTP/1.1 301 Moved Permanently
Date: Mon, 14 Jul 2025 19:53:40 GMT
Server: Apache
Strict-Transport-Security: max-age=157680000; preload
Content-Security-Policy: upgrade-insecure-requests
X-Frame-Options: SAMEORIGIN
Location: https://archive.icann.org/en/presentations/crocker-dnssac-report-shanghai-30oct02.ppt
Cache-Control: max-age=3600
Expires: Mon, 14 Jul 2025 20:53:40 GMT
Content-Length: 292
Content-Type: text/html; charset=iso-8859-1
HTTP/1.1 200 OK
Date: Mon, 14 Jul 2025 19:53:41 GMT
Server: Apache
Strict-Transport-Security: max-age=157680000; preload
Content-Security-Policy: upgrade-insecure-requests
X-Frame-Options: SAMEORIGIN
Last-Modified: Sun, 26 Feb 2012 03:33:48 GMT
ETag: "8a00-4b9d5a973321a"
Accept-Ranges: bytes
Content-Length: 35328
Cache-Control: max-age=604800
Expires: Mon, 21 Jul 2025 19:53:41 GMT
Referrer-Policy: origin-when-cross-origin
Content-Type: application/vnd.ms-powerpoint
Content-Language: en
??ࡱ? > ?? B ???? ???? A ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ?? ?( ? ? ? ?
?? / ? 0 ? ?? ?D T i m e s N e w R o m a n (? ? ?? 0 (? ??
0 ? ?D A r i a l N e w R o m a n (? ? ?? 0 (? ??
0 ? ?D S y m b o l e w R o m a n (? ? ?? 0 (? ??
0 ? ? ? @ ?? ? . ?
@ ?n ??? " d d @ ??? ?????? @@ `` ?? | ?t ? ? ! 8
? ?0 ? ? ?A ? ? ?A ? ? ? @ ? ? ? ? ? ? ??? ʚ;2N?? ʚ; ?g ? ?4 g d g d @? ??
0 ???????? p ? p p ? @ < ?4 ! d ! d l? qt
0?? $e- < ?4 d d d d l? qt
0?? $e- ? < ?4 d d d d l? ?p
0?? P ?? ?9 ? _ _ _ P P T 1 0 ?
? ? ?6 ?L ? _ _ _ P P T 9 ?. ?& ? ? ? ? ? % ?" ? ? ?/ ICANN Security and Stability Advisory Committee ? ?( ICANN Meetings
Shanghai
October 30, 2002 ? ? ? Committee ? ?? Steve Crocker, Chair
Alain Aina
Jaap Akkerhuis
Doug Barton
Steven M. Bellovin
Rob Blokzijl
David R. Conrad
Mark Kosters
Allison Mankin
Ram Mohan ? ? Z ? f ?j & ? ? ?0 ? ? ?? Russ Mundy
Jun Murai
Frederico A.C. Neves
Ray Plzak
Doron Shikmoni
Ken Silva
Bruce Tonkin
Paul Vixie
Rick Wesson
Stuart Lynn, ex-officio ?, ? Z u f ?? & ? ? ? Committee Strengths ? ?? Root Server Operators
gTLD Operators
ccTLD Operators
Name Space Registries
Regional Internet Registries (RIRs)
Registrars
Internet Security
No policy or political members(!)
?D ? " ? " ?? ?> ? B ?
? ? Topics ? ?S General progress
Zone transfer
Root and TLD denial of service attack
Whois Accuracy ? E
? ? ? Strength ? ?p Protocols: The protocols are well defined and well designed
System Design: The system of servers and communication paths is strong and robust against both qualitative attacks, e.g. source address spoofing, and quantitative attacks, e.g. DDOS.
Registration: The registration procedures are strong and reasonably uniform
Threats: The threats are identified and countered ?j q ? ? Z
2 ?
? * ? ? ? Measurement ? ?? M e t r i c s a n d M i l e s t o n e s
W h a t c o n s t i t u t e s g o o d ?
P a r t l y q u a n t i t a t i v e a n d p a r t l y q u a l i t a t i v e
M e a s u r e m e n t s
W h e r e a r e w e ?
H o w q u i c k l y a r e w e i m p r o v i n g ?
M a k e s u r e w e r e a l l t a l k i n g a b o u t t h e s a m e t h i n g s a v o i d v a g u e h y p e r b o l e ?p Z D Z
Z , Z J Z D
, J ?? ?
? ? Long term schedule ? ?? Plot course toward acceptable state
Probably a couple of years
Shift into maintenance mode
Re-evaluate charter, organization, operation
?` $ - $ - ? ? ? Near term schedule ? ?? B y S h a n g h a i &
D e s c r i p t i o n
V u l n e r a b i l i t i e s
S e c u r i t y A r c h i t e c t u r e
M e a s u r e m e n t f r a m e w o r k ?&
H
H ? ? ? Actual Progress ? ?$ F r a m e w o r k i s c o m i n g a l o n g
D e t a i l s p r o g r e s s i s s l o w e r t h a n d e s i r e d
W i l l s h i f t t o i n d i v i d u a l r e c o m m e n d a t i o n s o n a q u i c k e r s c h e d u l e
C u r r e n t e v e n t s
? ? ? ? ? ?0 The Distributed Denial of Service (DDoS) Attacks ? 1 1 ( ? #
? ?> A t t a c k w a s s u b s t a n t i a l a n d s e r i o u s , b u t &
D a m a g e t o e n d u s e r s w a s m i n i m a l
C o n c u r r i n g w i t h R S S A C , e t a l . .
S t r u c t u r e i s s o u n d g o o d r e d u n d a n c y a n d d i v e r s i t y
O p e r a t o r s r e s p o n d e d w e l l
S o m e s e r v e r s s u f f e r e d u n d e r t h e l o a d
B u t n o n e b r o k e
C a p a c i t y a n d r a p i d r e s p o n s e f r o m o p e r a t o r s w a s t h e k e y . ?t I P P q P P 8 P I q 8 ? ? ? DDoS -- Improvements ? ? ?? Direct improvements in DNS
Strengthen the servers and operations
Generic improvements against DDoS
Secure the edge
Reduce number of easily captured (porous) hosts
?` & " @ & " @ ? ^ B ? ? ? SAC actions ? ?? Work with RSSAC, et al on a report
Extend SAC activity to include operational issues
Open a dialog on the generic DDoS security issue ? r ? ? ? Zone Transfer Controversy ? ?v ICANN/IANA asked SAC to comment on procedures involved in zone transfer
Extended controversy; SAC focus is on security ? ? ? SAC comments on AXFR ? ?k Essential requirements
Authentication of request(or)
Consistency between parent and child
Desirable requirements
Good glue; accurate IP addresses of the nameservers.
Clean data, e.g. well-formed host names of nameservers
Up to date version of BIND or other software
Redundant, reliable servers, preferably geographically distributed
Disaster recovery preparations ?\ Z C Z Z ? Z C ? ?> )
f - ? ? ? ? SAC actions on AXFR ? ?V ccTLDs, IANA and SAC have formed small, short term working group to resolve procedures ? Q ? ? ? SAC comments on gTLD Whois ?, ? ?{ To ICANN
Last verified date
Privacy is needed
Standard format be developed
To IANA
Publicly available list of WHOIS servers ?L B ) B ) ? ?? ? ` ? ? ??? ?? ?? ?? ? ??? ` ? ??? ??? ̙ 33? ??? ??? ` ? ??? 333 ??? ??? MMM ??? ` ? ??? ff3 ?? 3?3 ? 3? ??f ` ? ??? ??? ??f ? ? ? ??? ` ? ??? ??? ??? f? ? ? ` ? ??? ??? 3?? ??? ? ? ??? ?> ??? " d d @ ??? ??????, ?| ??? " d d ? @ ??? ?????? ? ? ? " ?@ ? ?` ? ? ? ?n ??? " d d @ ??? ?????? @@ `` ?? P ?R @ ` ? ` ? p ?> ? ?> ? ? ? ?( ?
? ??
?
? ?6 ? |9-? ? ? ? ? ? "? ? ? ???P ? ? -
?T ? ? Click to edit Master title style ? ! ?
! ?$
?
? ?0 ? ?-? ? ? ? ? "? ? ? ??? ? ? -
? ? ?R Click to edit Master text styles
Second level
Third level
Fourth level
Fifth level ? !
?
S ??
?
? ?0 ? L-? ? ? ? ? "? ? ? `?`? ? ? -
?> ? ? * ? ? ??
?
? ?0 ? ?@-? ? ? ? ? "? ? ? `??? ? ? -
?@ ? ? * ? ? ??
?
? ?0 ? p?? ? ? ? ? "? ? ? ` ?? ? ? -
?@ ? ? * ? ? ?H
? ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ? D e f a u l t D e s i g n ?m ? ? ? ?? ? ?$ ?( ?
? ?r
? S ? ? ?c-? ? ? ???p ? ? -
? ? ?r
? S ? ? ??? ? ? ? ` ?
? ? ?
? ? ?H
? ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?y ? _ _ _ P P T 1 0 ?Y + D?= '? ? ???? =?
@B? + ?? ?
? ? ? P ? ?U ?( ?
? ?r
? S ? ? ts-? ? ? ???P ? ?
-
? ? ?x
? c ?$ ? Ht-? ? ? ?? ? ? -
? ? ?r
? S ? ? u-? ? ? ?p ? ? ? -
? ? ? ?
?
? ?0 ? ?w-? ? ? ? ? ? ? 0?@P
?I ? ? Staff support: Jim Galvin ? 2 ?H
? ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?y ? _ _ _ P P T 1 0 ?Y + D?= '? ? ???? =?
@B? + ?m ?
? ? ?? ` ? $ ?$ ?( ?
? $ ?r
? $ S ? ? (X-? ? ? ???P ? ?
-
? ? ?r
? $ S ? ? ?-? ? ? ??? ? ? -
? ? ?H
? $ ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?y ? _ _ _ P P T 1 0 ?Y + D?= '? ? ???? =?
@B? + ?? ?
? ? ? ? ? H ?< ?( ?
? H ?~
? H s ?* ? ??-? ? ? ? ???P ? ?
-
? ? ?~
? H s ?* ? ?d,? ? ? ? ??? ? ? ,
? ? ?H
? H ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. ??? ?? + D?= '? ? ???? =?
@B? + ?m ?
? ? ?? ? ? 4 ?$ ?( ?
? 4 ?r
? 4 S ? ? ?h,? ? ? ???P ? ?
,
? ? ?r
? 4 S ? ? ?,? ? ? ??? ? ? ,
? ? ?H
? 4 ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?y ? _ _ _ P P T 1 0 ?Y + D?= '? ? ???? =?
@B? + ?m ?
? ? ?? ? ? 8 ?$ ?( ?
? 8 ?r
? 8 S ? ? ?*,? ? ? ???P ? ?
,
? ? ?r
? 8 S ? ? ?-,? ? ? ??? ? ? ,
? ? ?H
? 8 ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?y ? _ _ _ P P T 1 0 ?Y + D?= '? ? ???? =?
@B? + ?m ?
? ? ?? ? ? < ?$ ?( ?
? < ?r
? < S ? ? 8;,? ? ? ???P ? ?
,
? ? ?r
? < S ? ? <,? ? ? ??? ? ? ,
? ? ?H
? < ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?y ? _ _ _ P P T 1 0 ?Y + D?= '? ? ???? =?
@B? + ?m ?
? ? ?? ? ? @ ?$ ?( ?
? @ ?r
? @ S ? ? dN,? ? ? ???P ? ?
,
? ? ?r
? @ S ? ? T,? ? ? ??? ? ? ,
? ? ?H
? @ ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?y ? _ _ _ P P T 1 0 ?Y + D?= '? ? ???? =?
@B? + ?$ ?
? ? ?? ?? x ?$ ?( ?
? x ?r
? x S ? ? ??,? ? ? ???P ? ?
,
? ? ?r
? x S ? ? H?,? ? ? ??? ? ? ,
? ? ?H
? x ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?8 ?0 ? _ _ _ P P T 1 0 ? ?. ???1? ?} ?
? ? ?? ? L ?$ ?( ?
? L ?r
? L S ? ? @?,? ? ? ???P ? ?
,
? ? ?r
? L S ? ? ?D,? ? ? ??? ? ? ,
? ? ?H
? L ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?? ? _ _ _ P P T 1 0 ?i ?. ???m?* + D?= '? ? ???? =?
@B? + ?} ?
? ? ?? ? P ?$ ?( ?
? P ?r
? P S ? ? ?,? ? ? ???P ? ?
,
? ? ?r
? P S ? ? Ԗ,? ? ? ??? ? ? ,
? ? ?H
? P ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?? ? _ _ _ P P T 1 0 ?i ?. ??@?#{ + D?= '? ? ???? =?
@B? + ?$ ?
? ? ?? ? T ?$ ?( ?
? T ?r
? T S ? ? ?,? ? ? ???P ? ?
,
? ? ?r
? T S ? ? ز,? ? ? ??? ? ? ,
? ? ?H
? T ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?8 ?0 ? _ _ _ P P T 1 0 ? ?. ?????? ?$ ?
? ? ?? @? \ ?$ ?( ?
? \ ?r
? \ S ? ? o,? ? ? ???P ? ?
,
? ? ?r
? \ S ? ? ?o,? ? ? ??? ? ? ,
? ? ?H
? \ ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?8 ?0 ? _ _ _ P P T 1 0 ? ?. ??PL?E ?$ ?
? ? ?? P? ` ?$ ?( ?
? ` ?r
? ` S ? ? ?u,? ? ? ???P ? ?
,
? ? ?r
? ` S ? ? lv,? ? ? ??? ? ? ,
? ? ?H
? ` ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?8 ?0 ? _ _ _ P P T 1 0 ? ?. ??0??h ?} ?
? ? ?? `? d ?$ ?( ?
? d ?r
? d S ? ? 0?,? ? ? ???P ? ?
,
? ? ?r
? d S ? ? ??,? ? ? ??? ? ? ,
? ? ?H
? d ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?? ?? ? _ _ _ P P T 1 0 ?i ?. ??0? + D?= '? ? ???? =?
@B? + ?$ ?
? ? ?? ?? | ?$ ?( ?
? | ?r
? | S ? ? ??,? ? ? ???P ? ?
,
? ? ?r
? | S ? ? ?!,? ? ? ??? ? ? ,
? ? ?H
? | ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ̙ 33? ??? ??? ?8 ?0 ? _ _ _ P P T 1 0 ? ?. ????y? rX 0 ? ?( Y+ ?. @ 4 ?6 ?8 p; ? t1 ?= @ ?B E GG sI ?K $N ? ?
PP ? ?? ?????Oh?? +'??0 ? ` h ? ? ? ?
? ?
? Security Advisory Committee Steve Crocker or
Louis Touton or 15 i Microsoft PowerPoint mit@ ??Ǘ @ p??F^ ?@ `
??? ? G l ???? ?g . 1 ?? ? ??? - ? ??? - @ ! ? ?????? ? - - '?? ??? ? @ Times New Roman - . 1 2
+? ICANN Security and Stability * + , - " " . ? ? "System hi ? - ? ??? ? @ Times New Roman - . " 2
t? Advisory Committee+ ) / / . - ? ??? ? @ Times New Roman - . 2
?U ICANN Meetings (
. - ? ??? ? @ Times New Roman - . 2
? Shanghai . - ? ??? ? @ Times New Roman - . 2
YY October 30, 2002
. - ? ?? ??՜.?? +,??D ??՜.?? +,??? T ? ? ? ? ? ? ? ?
? ?
? ? On-screen Show Longitude Systems, Inc ?P n ?
Times New Roman Arial Symbol Default Design 0 ICANN Security and Stability Advisory Committee
Committee Committee Strengths Topics Strength Measurement Long term schedule Near term schedule Actual Progress 1 The Distributed Denial of Service (DDoS) Attacks DDoS -- Improvements SAC actions Zone Transfer Controversy SAC comments on AXFR SAC actions on AXFR SAC comments on gTLD Whois Fonts Used Design Template
Slide Titles L @ ? ? ? ( @ _AdHocReviewCycleID _EmailSubject
_AuthorEmail _AuthorEmailDisplayName _ReviewingToolsShownOnce ? 7)? $ Slides from Shanghai; ccTLD members steve@stevecrocker.com c Steve Crocker ck tev ?$ _???P ? ,Louis Touton L o u i s T o u t o n
! " # $ % & ' ( ????* + , - . / 0 ????2 3 4 5 6 7 8 ????: ; < = > ? @ ????????C ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????R o o t E n t r y ???????? ??d?O??? ? ?)? ???? C u r r e n t U s e r ???????????? 9 S u m m a r y I n f o r m a t i o n ( ???????? ) P o w e r P o i n t D o c u m e n t ( ???? ?P D o c u m e n t S u m m a r y I n f o r m a t i o n 8 ???????????? 1 ???????????? ???????????? ????????????