1. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Network Abuse: The APNIC perspective Network Abuse BOF APNIC 12 th Open Policy Meeting Taipei, TW, 30 August 2001

2. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Introduction What sorts of abuse are we talking about? What sorts of abuse are we talking about? Spamming Spamming Hacking Hacking Viruses Viruses Many blur the line between spam and hacking Many blur the line between spam and hacking Related problem for APNIC Related problem for APNIC Complaints about spamming, hacking, and viruses (and credit card fraud, and stalking, and other illegal activities) Complaints about spamming, hacking, and viruses (and credit card fraud, and stalking, and other illegal activities)

3. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Level of impact Snapshot of impact Snapshot of impact Two week period Two week period Of 2357 tickets in total, more than 1000 were abuse related Of 2357 tickets in total, more than 1000 were abuse related Tracked request queues only Tracked request queues only Not including personal mailboxes and non-tracked accounts Not including personal mailboxes and non-tracked accounts Approx 1-3 staff- hours per day Approx 1-3 staff- hours per day

4. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Why does APNIC get complaints? What is Whois? What is Whois? Technical troubleshooting resource Technical troubleshooting resource Who are Whois users? Who are Whois users? Used to be technical people Used to be technical people Now it can be anyone on the Internet Now it can be anyone on the Internet Software tools have introduced Whois to the broader community Software tools have introduced Whois to the broader community This is the source of the greatest confusion and misplaced complaints This is the source of the greatest confusion and misplaced complaints

5. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E APNICs role APNIC can be responsible for: APNIC can be responsible for: Quality of registration Quality of registration Integrity of contact details Integrity of contact details Input for future development of Whois Input for future development of Whois Enhanced Whois interface Enhanced Whois interface Education Education Training Training FAQs FAQs Standard replies Standard replies Public discussions Public discussions

6. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E APNICs role APNIC cannot be responsible for: APNIC cannot be responsible for: Policing behaviour Policing behaviour No legal power to do it No legal power to do it No practical ability to do it No practical ability to do it And it would not be appropriate anyway And it would not be appropriate anyway Registries are responsible for how their constituents manage their addressing Registries are responsible for how their constituents manage their addressing Registries are not responsible for conduct or content within networks Registries are not responsible for conduct or content within networks

7. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E A shared problem Misunderstanding of the regional split of Whois biases the perception others have of this region Misunderstanding of the regional split of Whois biases the perception others have of this region Common view is that Asia is where spammers and hackers thrive Common view is that Asia is where spammers and hackers thrive Increasingly frequent requests for information to allow wide-scale filtering Increasingly frequent requests for information to allow wide-scale filtering APNIC seeks advice on strategies and actions… APNIC seeks advice on strategies and actions…