28 Abuse Prevention and Mitigation

Prototypical answer:

As documented, Amica does not plan to open second level names to commercial registration. However, commensurate with our enterprise-wide focus on data security, Amica and its registry services provider, Neustar, will carefully monitor back-end registry service systems in order to prevent fraudulent or abusive activity in the TLD.

As an insurance provider, Amica accepts reports of alleged illegal or otherwise inappropriate activity at its corporate website at www.amica.com⁄Amica⁄Contact⁄ContactUs. This information consists of, at a minimum, a valid e-mail address dedicated solely to the handling of malicious conduct complaints, and a telephone number and mailing address for the primary contact. The company will continue to make this avenue available to its customers, end users, and law enforcement.

MEASURES FOR REMOVAL OF ORPHAN GLUE RECORDS

As the Security and Stability Advisory Committee of ICANN (SSAC) rightly acknowledges, although orphaned glue records may be used for abusive or malicious purposes, the “dominant use of orphaned glue supports the correct and ordinary operation of the DNS.” See http:⁄⁄www.icann.org⁄en⁄committees⁄security⁄sac048.pdf.

While orphan glue often support correct and ordinary operation of the DNS, Amica and Neustar understand that such glue records can be used maliciously to point to name servers that host domains used in illegal phishing, bot-nets, malware, and other abusive behaviors. Problems occur when the parent domain of the glue record is deleted but its children glue records still remain in DNS. Therefore, when the registry has written evidence of actual abuse of orphaned glue, it will take action to remove those records from the zone to mitigate such malicious conduct.

Neustar runs a daily audit of entries in its DNS systems and compares those with its provisioning system. This serves as an umbrella protection to make sure that items in the DNS zone are valid. Any DNS record that shows up in the DNS zone but not in the provisioning system will be flagged for investigation and removed if necessary. This daily DNS audit serves to not only prevent orphaned hosts but also other records that should not be in the zone.

In addition, if either Amica or Neustar become aware of actual abuse on orphaned glue after receiving written notification by a third party through its Abuse Contact or through its customer support, such glue records will be removed from the zone.

RESOURCING PLANS

Responsibility for abuse mitigation rests with a variety of functional groups.  The Abuse Monitoring team is primarily responsible for providing analysis and conducting investigations of reports of abuse.  The customer service team also plays an important role in assisting with the investigations, responded to customers, and notifying registrars of abusive domains.  Finally, the Policy⁄Legal team is responsible for developing the relevant policies and procedures. 

The necessary resources will be pulled from the pool of available resources described in detail in the response to Question 31. The following resources are available from those teams:

Customer Support – 12 employees

Policy⁄Legal – 2 employees

The resources are more than adequate to support the abuse mitigation procedures of the .amica registry.

Similar gTLD applications: (0)