White Paper: The New gTLDs – Security by Design

Dec. 13, 2012 - PRLog -- A white paper – The New gTLDs – 'Security by Design' – published by CyberDefcon with input from HostExploit looks at the problems presented by domain abuse, what the new gTLD program is doing to address these issues and what other proactive measures can be taken by the industry to support greater security and infrastructural stability.

Cybercriminal activity on the web reminds us that there are many obstacles to industry growth with domain abuse fuelling some of the worst offences. For example, nearly 10,000 new malicious domains are identified every day (source: googleonlinesecurity.blogspot.co.uk/2012/06/safe-browsing-protecting-web-users-for.html). These may be used in phishing campaigns or website-based attacks against businesses, financial institutions, public organizations and others, causing suffering to many innocent victims.

Changes to the Internet-naming structure in 2013, through the new gTLD program, and the consequent introduction of hundreds of new registries and registrars, results in an opportunity to map out a new model for the domain industry. While the aim of the new gTLD program is to increase diversity and competition in the domain market it also presents a unique opportunity to create an improved, secure environment and to reduce the spread of cybercriminal activity such as phishing, malware, botnets and cybersquatting.

“The new gTLD program has enabled cross-sector collaboration on how new gTLDs can be secured against some of the most enduring cyber security problems,” said Jart Armin, CyberDefcon Principal and HostExploit Editor. “The new registries and registrars can take the lead in demonstrating a commitment to online security and in doing so increase confidence and trust within the domain community. This trust factor can ultimately attract new business and drive future innovations; a win for all concerned.”

The new white paper is recommended for any entity interested in the new gTLD program including registries, registrars and registrants. The paper provides an assessment of the current security issues, how the new gTLD program addresses these together with recommendations, future innovations and a Best Practice Guide.

Download the white paper here (.pdf): The New gTLDs – 'Security by Design' https://cyberdefcon.com/?p=new-gtld-white-paper.

Feedback relating to the white paper is welcome at this website: http://newgtldsecurity.com, and in anticipation of the release of new research on the topic of new gTLDs security in 2013.

About CyberDefcon https://cyberdefcon.com/

CyberDefcon is an independent organization dedicated to the pursuit of making the internet a safer place. CyberDefcon provides clients and partners with the tools and information necessary to: track down and resolve cybercrime; prevent loss of business through cyber alerts; militate against cyber attacks; manage risks and vulnerabilities. The CyberDefcon team believes in encouraging a proactive and preventative approach to security.

CyberDefcon projects include HostExploit, (http://hostexploit.com/) a research community focusing on web hosts and registrars, and SiteVet, (http://sitevet.com/) a tool aimed at the security research and web development community, providing historical and current data on hosts and domains.

Read the HostExploit blog post here: http://hostexploit.com/blog/14-reports/3541-white-paper-the-new-gtlds-security-by-design.html