You are on page 1of 30

ITU Regional Cybersecurity Workshop - Hanoi - August 2007

Richard D G Cox - CIO, The Spamhaus Project


About Spamhaus
> Founded in late 90’s, non-profit
> Headquartered in the UK
> 25+ specialists around the world
> DNSBLs: SBL, XBL and PBL
> ROKSO, DROP
> Corporate research team
Industry Self-Regulation
Spamhaus’ primary role is to research and
publish accurate information - specifically to
enable ISPs to make decisions on what
connections to their networks should be
accepted, and to ensure end-user compliance
with the ISP’s contractual requirements.
Industry Self-Regulation

Spamhaus is a member
of the London Action Plan
but is not a direct enforcer of
legislation in any jurisdiction
Industry Self-Regulation

Spamhaus will willingly provide


LEAs with any assistance they may
request on technical matters, and
any access they may need to our
confidential research.
Industry Self-Regulation

Spamhaus holds a lot of information


provided in confidence by
Industry players - on the
understanding that it can be made
available to LEAs where needed.
Spamhaus Users
> ISPs, ESPs, xSPs, governments,
universities, military, etc
> Over 1.2 billion mailboxes
protected
Spam is strongly linked with the
“underground” cyber-economy

Phishing is demonstrably a
self-perpetuating activity.
Spam will stop being a problem
when it stops being profitable
Spam will stop being a problem
when it stops being profitable
The most effective way to bring that about,
is for networks - especially backbone
networks - to act together to suppress the
addresses where the spammers operate.
Legislation and loss
of revenue are cited as
the reason why mostly
does not happen.
Governments
- and industry bodies -
need to formulate policies
to reshape motivation.
Trust and teamwork are essential
here - the real sources of spam
and the associated websites are
often concealed.
Trust and teamwork are essential
here - the real sources of spam
and the associated websites are
often concealed.
Industry specialists can trace these
sources but Networks need to accept
and act on their research.
Co-operation?
> We must try harder. Problems
are getting more serious and
harder to solve.
> Balance between prevention
of harm and the traditional
freedoms of the ‘net
Co-operation?
> Governments are not empowered
to solve these problems. They are
looking to the industry to
implement self-regulation.
In many countries,
current laws can pose
a serious obstacle to
industry co-operation.
They create safe havens
where spammers and
cyber-criminals can
operate anonymously.
Action is needed
NOW!
Problems are getting more serious
and harder to solve.
Two major barriers
to overcome -
language and time-zones.
Some sites do so
much harm that immediate
action is essential.
China and Russia are still
the most serious threat to
World Cybersecurity
Asian culture is to be
helpful - but sometimes it
is essential to say “NO”!
Chinese companies
are not good at ensuring
compliance by middle
management.
Foreigners can get hosting
in China to use as a platform for
cyber-attacks, more easily than
any other country.
On the internet, nobody knows you’re a dog!
You and your reputation are based solely on
what you do and say!
If you ignore concerns from
other networks and their
users - or if they think you do -
they will block traffic from your
network or country.
China’s new spam laws
do not help address the
problems that China is causing
to other countries.

You might also like