<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="ProgId" content="Word.Document"><meta name="Generator" content="Microsoft Word 12"><meta name="Originator" content="Microsoft Word 12"><link rel="File-List" href="file:///C:%5CDOCUME%7E1%5CANNE-R%7E1.INN%5CLOCALS%7E1%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_filelist.xml"><link rel="Edit-Time-Data" href="file:///C:%5CDOCUME%7E1%5CANNE-R%7E1.INN%5CLOCALS%7E1%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_editdata.mso"><link rel="themeData" href="file:///C:%5CDOCUME%7E1%5CANNE-R%7E1.INN%5CLOCALS%7E1%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_themedata.thmx"><link rel="colorSchemeMapping" href="file:///C:%5CDOCUME%7E1%5CANNE-R%7E1.INN%5CLOCALS%7E1%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_colorschememapping.xml"><style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;
mso-font-charset:2;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:0 268435456 0 0 -2147483648 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;
mso-font-alt:"Calisto MT";
mso-font-charset:0;
mso-generic-font-family:roman;
mso-font-pitch:variable;
mso-font-signature:-1610611985 1107304683 0 0 159 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;
mso-font-alt:"Arial Rounded MT Bold";
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:-1610611985 1073750139 0 0 159 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman","serif";
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;}
h2
{mso-style-priority:9;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
mso-pagination:widow-orphan;
mso-outline-level:2;
font-size:18.0pt;
font-family:"Times New Roman","serif";
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-noshow:yes;
mso-style-priority:99;
color:purple;
mso-themecolor:followedhyperlink;
text-decoration:underline;
text-underline:single;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman","serif";
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-unhide:no;
mso-style-locked:yes;
mso-style-link:"Heading 2";
mso-ansi-font-size:18.0pt;
mso-bidi-font-size:18.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
font-weight:bold;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-size:10.0pt;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:1123957400;
mso-list-template-ids:1114800784;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<h2><span style="font-family: "Arial","sans-serif";">News
Alert</span></h2>
<p style="margin: 0in 0in 7.5pt;"><span style="font-family: "Arial","sans-serif";"><a href="http://www.icann.org/en/announcements/announcement-24may10-en.htm">http://www.icann.org/en/announcements/announcement-24may10-en.htm</a></span></p>
<div class="MsoNormal" style="margin-top: 15pt; text-align: center;" align="center"><span style="font-family: "Arial","sans-serif";">
<hr align="center" size="2" width="100%">
</span></div>
<h2 style="margin-bottom: 0.0001pt;"><span style="font-family: "Arial","sans-serif";">Public Comment:
April 2010 DNS-CERT Operational Requirements & Collaboration Analysis</span></h2>
<p style="margin: 11.25pt 0in 0.0001pt;"><span style="font-family: "Arial","sans-serif";">24
May 2010</span></p>
<p><span style="font-family: "Arial","sans-serif";">ICANN is today opening a
public comment period on the <a href="http://www.icann.org/en/topics/ssr/dns-cert-collaboration-analysis-24may10-en.pdf">April
2010 DNS-CERT Operational Requirements and Collaboration Analysis Workshop
Report</a> (with Minority Statement). In advance of the ICANN Brussels meeting,
ICANN is seeking comments on the potential requirements identified in the
workshop report, DNS Security response gaps.</span></p>
<p><span style="font-family: "Arial","sans-serif";">In addition, ICANN is
publishing the <a href="http://www.icann.org/en/public-comment/summary-analysis-strategic-ssr-initiatives-and-dns-cert-business-case-24may10-en.pdf">Summary
& Analysis of Comments on the Security Strategic Initiatives and Global
DNS-CERT Business Case papers</a>, and the <a href="http://www.icann.org/en/topics/ssr/dns-cert-consultation-record-24may10-en.pdf">DNS-CERT
Consultation record</a>. The consultation record is included for transparency
on the formation of the DNS-CERT concept and consultations that have occurred
in parallel with the public comment period on the Security Strategic
Initiatives papers.</span></p>
<p><span style="font-family: "Arial","sans-serif";">The DNS-CERT Operational
Requirements and Collaboration Analysis Workshop report was prepared by Jose
Nazario, Arbor Networks, Roy Arends, Nominet, and Chris Morrow, Google, and is
the output from a tabletop workshop conducted 6-7 April 2010 in Washington DC.
Participants identified several requirements for responding to Internet and DNS
security events, many of which are under-met or ignored by existing DNS
security capabilities. They are:</span></p>
<ul type="disc"><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">A trusted
communications channel, or multiple channels, for use during event
response that is usable by the appropriate parties.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">Standing
incident coordination and response functions, which enable consistent and
professional incident handling efforts.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">Incident
status tracking through to completion, with communication to the necessary
parties.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">Trusted
guidance on issues with knowledge and experience with the various and
varied areas of Internet and DNS security. Respect of these voices by the
areas of the Internet and DNS communities with which they speak is
important.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">A trust
broker / introduction service across traditional communities boundaries,
recognizing that the community identifying threats to Internet and DNS
operations is often far-flung and sometimes outside the knowledge of the
Internet and DNS operator and vendor communities.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">Analysis
capabilities, including data such as DNS traffic, software vulnerabilities
and attack traffic, to validate incidents and identify next steps as
quickly as possible.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">Institutional
memory in the form of reports, recommendations, and best practices, which
can inform the various Internet and DNS security communities, support
future successful incident responses, and help evolve incident response
capabilities.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">Outreach
and education functions to share best practices for securing Internet and
DNS operations, secure registration functions, implementing DNSSEC, and
other key DNS and security factors.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">The
ability to act quickly, and to be prepared to act with necessary resources
in response to threats to the DNS of a global nature in a timely and
sustained manner.</span></li><li class="MsoNormal" style=""><span style="font-family: "Arial","sans-serif";">A
sensitivity to the complexity of the international nature of the DNS,
understanding the capabilities and limitations of the global DNS
community.</span></li></ul>
<p><span style="font-family: "Arial","sans-serif";">Workshop participants noted
many of these functions are addressed by various groups, either standing or
ad-hoc. Some participants expressed concern that only a few of the existing
organizations are DNS-specific. The report includes a <a href="http://www.icann.org/en/topics/ssr/dns-cert-collaboration-analysis-minority-statement-18may10-en.pdf">Minority
Statement</a> from Kathy Kleiman, Public Interest Registry, and Greg Aaron,
Afilias.</span></p>
<p><span style="font-family: "Arial","sans-serif";">Comments on the Operational
Requirements and Collaboration Analysis Report submitted to <a href="mailto:dns-collab-analysis@icann.org">dns-collab-analysis@icann.org</a>
will be considered until 2 Jul 2010 23:59 UTC. Comments may be viewed at <a href="http://forum.icann.org/lists/dns-collab-analysis/">http://forum.icann.org/lists/dns-collab-analysis/.</a></span></p>
<p><span style="font-family: "Arial","sans-serif";">A consultation session will
be held at the ICANN meeting in Brussels on the Security Strategic Initiatives
(DNS-CERT and system-wide DNS Risk Assessment and exercises), with a date and
time soon to be included in the Brussels meeting schedule.</span></p>
<div class="MsoNormal" style="text-align: center;" align="center"><span style="font-family: "Arial","sans-serif";">
<hr align="center" size="2" width="100%">
</span></div>
<p style="text-align: center;" align="center"><strong><span style="font-family: "Arial","sans-serif";"><a href="http://www.icann.org/en/magazine/">Sign up for
ICANN's Monthly Magazine</a></span></strong><span style="font-family: "Arial","sans-serif";"></span></p>