1. i2Coalition: How To Build Relationships And Save Money With Better Abuse Reporting Moderator: Michele Neylon CEO, Blacknight

2. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM No Pitch Presentation Policy Please help us produce more relevant content in the future by rating this session using our event app! Each presenter signs a speaker agreement certifying that their presentation will be educational and not a sales pitch. Attendees have a right to report speakers not adhering to the policy.

3. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM How To Build Relationships And Save Money With Better Abuse Reporting Michele Neylon CEO Blacknight Internet Solutions Ltd @mneylon/@blacknight Alan O'Reilly Customer Service Manager Blacknight @saloreilly@saloreilly/@blacknight Drew Bagley Director of Operations Secure Domain Foundation @SecureDomain Jay Sudowski CEO Handy Networks LLC @handynetworks

4. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM What is abuse? Abuse is a violation of terms of service - Categories include: SPAM, phishing, botnet command and control, malware hosting - Intellectual property infringement - Other illegal content in the jurisdiction of the hosting company

5. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM How does abuse affect you? Customer service - Customers are usually the victims - Responding to complaints, diagnosing problems Technology costs - Increased infrastructure costs (i.e. firewalls) Legal costs - Time spent responding to legal requests - Money spent involved in litigation

6. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM How does abuse affect you? Reputational costs - Blocked IP addresses - Reliability and security questioned by customers - Known for suspicious activity to law enforcement

7. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM Cost-saving solutions Proactive anti-abuse - Detect compromised servers and malicious activity before a complaint Better abuse reporting - Get the right information to the right people - Alert customers and mitigate compromise quickly - Screen out frivolous or misdirected complaints

8. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM Abuse reporting Need for actionable information routed to the right person - IP address - Domain name (if relevant) - Example URL - Email address (if relevant) - Category of abuse (important to distinguish intellectual property violations from other complaints) - Relevant dates - Harm (if any) - Law/policy violated - Contact information of complainant

9. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM Abuse reporting Standardize fields across industry - Automated routing between hosting companies, registries, registrars - Actionable information readily available when needed to share with law enforcement, cybersecurity teams, etc.

10. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM Abuse reporting Save money through cost avoidance!!! - Reduce resources spent on frivolous complaints - More efficiently handle valid complaints - Reduce litigation costs - Preserve reputation - Protect customers - Prevent IP addresses from being blacklisted - Prevent missed opportunities

11. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM Anti-abuse resources Secure Domain Foundation – FREE anti-abuse API ShadowServer Google Safe Browsing APWG

12. THE GLOBAL EVENT FOR THE CLOUD AND SERVICE PROVIDER ECOSYSTEM Questions? Michele Neylon CEO Blacknight Internet Solutions Ltd @mneylon/@blacknight Alan O'Reilly Customer Service Manager Blacknight @saloreilly@saloreilly/@blacknight Drew Bagley Director of Operations Secure Domain Foundation @SecureDomain Jay Sudowski CEO Handy Networks LLC @handynetworks