DOMAIN NAME SPECULATION: ARE WE PLAYING WHAC-A-MOLE? Sara D
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Passive Monitoring of DNS Anomalies Bojan Zdrnja1, Nevil Brownlee1, and Duane Wessels2
Passive Monitoring of DNS Anomalies Bojan Zdrnja1, Nevil Brownlee1, and Duane Wessels2 1 University of Auckland, New Zealand, b.zdrnja,nevil @auckland.ac.nz { } 2 The Measurement Factory, Inc., [email protected] Abstract. We collected DNS responses at the University of Auckland Internet gateway in an SQL database, and analyzed them to detect un- usual behaviour. Our DNS response data have included typo squatter domains, fast flux domains and domains being (ab)used by spammers. We observe that current attempts to reduce spam have greatly increased the number of A records being resolved. We also observe that the data locality of DNS requests diminishes because of domains advertised in spam. 1 Introduction The Domain Name System (DNS) service is critical for the normal functioning of almost all Internet services. Although the Internet Protocol (IP) does not need DNS for operation, users need to distinguish machines by their names so the DNS protocol is needed to resolve names to IP addresses (and vice versa). The main requirements on the DNS are scalability and availability. The DNS name space is divided into multiple zones, which are a “variable depth tree” [1]. This way, a particular DNS server is authoritative only for its (own) zone, and each organization is given a specific zone in the DNS hierarchy. A complete domain name for a node is called a Fully Qualified Domain Name (FQDN). An FQDN defines a complete path for a domain name starting on the leaf (the host name) all the way to the root of the tree. Each node in the tree has its label that defines the zone. -
Monthly Cybersecurity Newsletter April 2018 Issue
Monthly Cybersecurity Newsletter April 2018 Issue Enterprise Security and Risk Management Office (ESRMO) From the Desk of the State Chief Risk Officer – Maria Thompson Be Careful What You Type You should be careful when typing a web address into your browser. It is very easy to enter a similar but incorrect domain name and end up somewhere you do not want to be. Unscrupulous individuals use domain names similar to more popular ones on the Internet in order to entice individuals who mistakenly type the wrong web address. This practice of using similar domain names and relying on individuals to type the wrong address is called typosquatting. A typosquatter’s URL will usually be one of several kinds: a common misspelling of the known name (e.g. exemple.com), a differently phrased name (e.g. examples.com), a different top-level domain name (e.g. example.org), or an abuse of a country code (example.cm). In fact, a report published in December 2009 by McAfee found that .cm was the riskiest domain in the world, with 36.7% of the sites posing a security risk to users. Once on a typosquatter’s site, the user may be tricked into thinking he or she is on the intended site, through the use of similar logos, website layouts or content. Visiting such a site, however, may result in malicious software (malware) to be downloaded and installed on the end user’s machine, or it may entice the end user to disclose private information. Most typosquatters are probably just aiming to make money by taking advantage of your errors. -
Dispute Resolution Mechanisms and Trademark Cybersquatting in Gtlds Old Style, Cctld Style and Gtld New Style
Dispute Resolution Mechanisms and Trademark Cybersquatting In ccTLD, Old Style gTLD and New Style gTLD Systems COMPARATIVE ANALYSIS OF THE US, EU AND INTERNATIONAL APPROACHES By Waddah Al-rawashdedh University of Szeged Faculty of Law and Political Sciences Graduate School Hungary 2017 Spring Dispute Resolution Mechanisms & Trademark Cybersquatting Table of Contents Page DEDICATION ............................................................................................ 8 ACKNOWLEDGMENTS ......................................................................... 9 LIST OF ABBREVIATIONS ................................................................... 10 ABSTRACT ................................................................................................ 12 INTRODUCTION ...................................................................................... 14 CHAPTER 1 DOMAIN NAMES AND TRADEMARKS ................................................ 22 1.1. Overview ....................................................................................... 22 1.2. Meaning of Domain Names and Domain Name System (DNS) ............................................................................................. 22 1.3. The Need and Importance of Domain Names ........................... 25 1.4. Types of Domain Names ............................................................. 26 1.4.1. “Country-code” TLDs ............................................................................... 26 1.4.2. “generic” TLDs ........................................................................................ -
Draft 7-17-11 an EMPIRICAL ANALYSIS of FAIR USE
Draft 7-17-11 AN EMPIRICAL ANALYSIS OF FAIR USE DECISIONS UNDER THE UNIFORM DOMAIN-NAME DISPUTE-RESOLUTION POLICY David A. Simon INTRODUCTION ................................................................................................................................................ 1 I. THE UDRP AND ITS PROBLEMS ............................................................................................................... 7 II. METHODOLOGY ..................................................................................................................................... 12 A. Sample Selection: Method of Selection .......................................................................................... 13 B. Types of Cases Selected for Sample............................................................................................... 14 III. FINDINGS ................................................................................................................................................ 17 A. U.S. Respondents Win Twice as Many Fair Use Cases as Other Respondents ............................. 17 B. U.S. Law Dominates UDRP Decisions .......................................................................................... 21 C. U.S. Panels Decide Mostly Cases Involving U.S. Respondents ..................................................... 23 IV. IMPLICATIONS ........................................................................................................................................ 25 A. Explaining U.S. Favoritism -
Proactive Cyberfraud Detection Through Infrastructure Analysis
PROACTIVE CYBERFRAUD DETECTION THROUGH INFRASTRUCTURE ANALYSIS Andrew J. Kalafut Submitted to the faculty of the Graduate School in partial fulfillment of the requirements for the degree Doctor of Philosophy in Computer Science Indiana University July 2010 Accepted by the Graduate Faculty, Indiana University, in partial fulfillment of the requirements of the degree of Doctor of Philosophy. Doctoral Minaxi Gupta, Ph.D. Committee (Principal Advisor) Steven Myers, Ph.D. Randall Bramley, Ph.D. July 19, 2010 Raquel Hill, Ph.D. ii Copyright c 2010 Andrew J. Kalafut ALL RIGHTS RESERVED iii To my family iv Acknowledgements I would first like to thank my advisor, Minaxi Gupta. Minaxi’s feedback on my research and writing have invariably resulted in improvements. Minaxi has always been supportive, encouraged me to do the best I possibly could, and has provided me many valuable opportunities to gain experience in areas of academic life beyond simply doing research. I would also like to thank the rest of my committee members, Raquel Hill, Steve Myers, and Randall Bramley, for their comments and advice on my research and writing, especially during my dissertation proposal. Much of the work in this dissertation could not have been done without the help of Rob Henderson and the rest of the systems staff. Rob has provided valuable data, and assisted in several other ways which have ensured my experiments have run as smoothly as possible. Several members of the departmental staff have been very helpful in many ways. Specifically, I would like to thank Debbie Canada, Sherry Kay, Ann Oxby, and Lucy Battersby. -
I Wish to Thank the United States Department of Commerce's
Comments from Danny Younger Introduction: I wish to thank the United States Department of Commerce’s National Telecommunications and Information Administration for this opportunity to comment on the continuation of the transition of the technical coordination and management of the Internet’s domain name and addressing system to the private sector. As a member of the public that has had the honor of serving as an elected Chair of the General Assembly of the Domain Name Supporting Organization of the Internet Corporation for Assigned Names and Numbers, I sincerely appreciate your posting of a Notice of Inquiry and wish to share with you my thoughts on the transition process as an individual that has tracked ICANN-related matters on a regular basis for the last six years. It has been said that “ICANN may not be the world’s most unpopular organization, but if it had consciously set out to make itself loathed it could hardly have been more successful.”1 I share that assessment. ICANN, the organization selected to embody the principles set forth in the White Paper2 is almost universally reviled. From my vantage point as a long-time ICANN participant, I have come to conclude that this passionate loathing has a single root cause: we detest ICANN because it has not remained true to the White Paper’s noble vision – rather than striving to become an organization committed to private, bottom-up coordination operating for the benefit of the Internet community as a whole, ICANN has chosen instead to focus its attention exclusively upon that select stakeholder community that feeds its coffers – it has become primarily a registry-registrar Guild Manager. -
D-FENS: DNS Filtering & Extraction Network System for Malicious Domain Names
University of Central Florida STARS Electronic Theses and Dissertations, 2004-2019 2018 D-FENS: DNS Filtering & Extraction Network System for Malicious Domain Names Jeffrey Spaulding University of Central Florida Part of the Computer Sciences Commons Find similar works at: https://stars.library.ucf.edu/etd University of Central Florida Libraries http://library.ucf.edu This Doctoral Dissertation (Open Access) is brought to you for free and open access by STARS. It has been accepted for inclusion in Electronic Theses and Dissertations, 2004-2019 by an authorized administrator of STARS. For more information, please contact [email protected]. STARS Citation Spaulding, Jeffrey, "D-FENS: DNS Filtering & Extraction Network System for Malicious Domain Names" (2018). Electronic Theses and Dissertations, 2004-2019. 6378. https://stars.library.ucf.edu/etd/6378 D-FENS: DNS FILTERING & EXTRACTION NETWORK SYSTEM FOR MALICIOUS DOMAIN NAMES by JEFFREY SPAULDING B.S. Clarkson University, 2003 M.S. SUNY Polytechnic Institute, 2013 A dissertation submitted in partial fulfilment of the requirements for the degree of Doctor of Philosophy in the Department of Computer Science in the College of Engineering and Computer Science at the University of Central Florida Orlando, Florida Summer Term 2018 Major Professor: Aziz Mohaisen c 2018 Jeffrey Spaulding ii ABSTRACT While the DNS (Domain Name System) has become a cornerstone for the operation of the Internet, it has also fostered creative cases of maliciousness, including phishing, typosquatting, and botnet communication among others. To address this problem, this dissertation focuses on identifying and mitigating such malicious domain names through prior knowledge and machine learning. In the first part of this dissertation, we explore a method of registering domain names with deliberate typographical mistakes (i.e., typosquatting) to masquerade as popular and well-established domain names. -
Outcomes Report of the GNSO Ad Hoc Group on Domain Tasting
GNSO Outcomes Report on Domain Tasting Doc. No.: Date: 2007/02/04 4 October, 2007 OUTCOMES REPORT OF THE GNSO AD HOC GROUP ON DOMAIN NAME TASTING 4 October 2007 Group Chair: Mike Rodenbaugh ICANN Staff: Olof Nordling, Patrick Jones STATUS OF THIS DOCUMENT This is the final version of the Outcomes Report from the GNSO ad hoc group on Domain Name Tasting, submitted to the GNSO Council on 4 October, 2007. GNSO Outcomes Report on Domain Tasting v1.6 Authors: Mike Rodenbaugh, [email protected] , Olof Nordling, [email protected] , Patrick Jones, [email protected], Page 1 of 144 GNSO Outcomes Report on Domain Tasting Doc. No.: Date: 2007/02/04 4 October, 2007 TABLE OF CONTENTS 1 EXECUTIVE SUMMARY 3 2 OBJECTIVE 5 3 BACKGROUND 7 4 OUTCOMES 10 5 NEXT STEPS 32 ANNEX 1 - SUBSCRIBERS TO THE DT LIST 33 ANNEX 2 - RFI RESPONSES 34 ANNEX 3 - EXPERIENCES FROM CCTLDS 97 ANNEX 4 - COMMENTS FROM UDRP PROVIDERS 104 ANNEX 5 – IPC CONSTITUENCY SUPPLEMENTAL RFI116 ANNEX 6 – REQUEST TO VERISIGN 144 GNSO Outcomes Report on Domain Tasting v1.6 Authors: Mike Rodenbaugh, [email protected] , Olof Nordling, [email protected] , Patrick Jones, [email protected], Page 2 of 144 GNSO Outcomes Report on Domain Tasting Doc. No.: Date: 2007/02/04 4 October, 2007 1 Executive summary 1.1 Background Following a request from the At-Large Advisory Committee in spring 2007, the GNSO Council called for an Issues Report on Domain Tasting from ICANN Staff in May 2007. This Issues Report, available at http://gnso.icann.org/issues/domain- tasting/gnso-domain-tasting-report-14jun07.pdf was discussed at the ICANN San Juan meeting, where the GNSO Council on 27 June 2007 (minutes at http://gnso.icann.org/meetings/minutes-gnso-27jun07.shtml) resolved to establish an ad hoc group for further fact-finding on the practice of domain tasting. -
Brief of Internet Commerce Association
No. 19-46 IN THE Supreme Court of the United States U.S. PATENT AND TRADEMARK OFFICE, ET AL., Petitioners, v. BOOKING.COM B.V., Respondent. ON WRIT OF CERTIORARI TO THE UNITED STATES COURT OF APPEALS FOR THE FOURTH CIRCUIT BRIEF OF THE INTERNET COMMERCE ASSOCIATION AS AMICUS CURIAE IN SUPPORT OF RESPONDENT Megan L. Brown Counsel of Record David E. Weslow Ari S. Meltzer Jeremy J. Broggi WILEY REIN LLP 1776 K Street NW Washington, DC 20006 (202) 719-7000 [email protected] February 19, 2020 Counsel for Amicus Curiae - i - TABLE OF CONTENTS Page TABLE OF CITED AUTHORITIES .......................... ii INTEREST OF AMICUS CURIAE ............................1 SUMMARY OF ARGUMENT .....................................3 ARGUMENT ...............................................................7 I. The Government Seeks A Bright-Line Rule That Would Devalue Registered Domain Names As A Class Of Intellectual Property Assets. ...............................................................7 II. The Government’s Rule Would Discourage Investment In The Internet Economy By Precluding Trademark Protection For New Types of Domain Names. ............................... 13 III. The Government’s Rule Would Eliminate A Critical Consumer Protection And Anti-Fraud Tool, Opening The Door To More Domain Name Abuse. ................................................... 15 A. Cybercriminals Abuse Domain Names Through Typosquatting And Domain Name Hijacking To Perpetrate Fraud And Proliferate Malware. .................... 16 B. Companies Rely On Trademark Protection To Combat Domain Name Abuse. ................................................... 20 C. Non-Trademark Remedies Do Not Provide A Sufficient Means For Combatting Domain Name Abuse. ..... 26 CONCLUSION .......................................................... 28 - ii - TABLE OF CITED AUTHORITIES Page(s) Cases Central Source LLC v. annaulcreditreports.com, No. 20-CV-84 (E.D. Va.) ....................................... 23 Central Source LLC v. aabbualcreditreport.com, No. 14-CV-918 (E.D. -
The Trend Towards Enhancing Trademark Owners' Rights-A Comparative Study of U.S. and German Trademark Law, 7 J
Journal of Intellectual Property Law Volume 7 | Issue 2 Article 2 March 2000 The rT end Towards Enhancing Trademark Owners' Rights-A Comparative Study of U.S. and German Trademark Law Rudolf Rayle the University of Iowa Follow this and additional works at: https://digitalcommons.law.uga.edu/jipl Part of the Comparative and Foreign Law Commons, and the Intellectual Property Law Commons Recommended Citation Rudolf Rayle, The Trend Towards Enhancing Trademark Owners' Rights-A Comparative Study of U.S. and German Trademark Law, 7 J. Intell. Prop. L. 227 (2000). Available at: https://digitalcommons.law.uga.edu/jipl/vol7/iss2/2 This Article is brought to you for free and open access by Digital Commons @ Georgia Law. It has been accepted for inclusion in Journal of Intellectual Property Law by an authorized editor of Digital Commons @ Georgia Law. Please share how you have benefited from this access For more information, please contact [email protected]. Rayle: The Trend Towards Enhancing Trademark Owners' Rights-A Comparativ JOURNAL OF INTELLECTUAL PROPERTY LAW VOLUME 7 SPRING 2000 NUMBER 2 ARTICLES THE TREND TOWARDS ENHANCING TRADEMARK OWNERS' RIGHTS-A COMPARATIVE STUDY OF U.S. AND GERMAN TRADEMARK LAW Rudolf Rayle* I. INTRODUCTION Conventionally trademarks are said to serve primarily as source identifiers. They are the medium through which consumers identify a particular product with a specific source (i.e., serve an identification or origin function). The origin function is therefore claimed to be the main function of trademarks and at first glance the definitions of trademarks in the Lanham Act as well as in the German Trademark Act, seem to confirm this traditional view.' * Rudi Rayle attended the Universities of Bonn and Tuebingen, Germany. -
Vol. 93 TMR 1035
Vol. 93 TMR 1035 RECONSIDERING INITIAL INTEREST CONFUSION ON THE INTERNET By David M. Klein and Daniel C. Glazer∗ I. INTRODUCTION Courts developed the theory of initial interest confusion (or “pre-sale confusion”) to address the unauthorized use of a trademark in a manner that captures consumer attention, even though no sale is ultimately completed as a result of any initial confusion. During the last few years, the initial interest confusion doctrine has become a tool frequently used to resolve Internet- related disputes.1 Indeed, some courts have characterized initial interest confusion on the Internet as a “distinct harm, separately actionable under the Lanham Act.”2 This article considers whether the initial interest confusion doctrine is necessary in the context of the Internet. Courts typically have found actionable initial interest confusion when Internet users, seeking a trademark owner’s website, are diverted by identical or confusingly similar domain names to websites in competition with, or critical of, the trademark owner. A careful analysis of these decisions, however, leads to the conclusion that a distinct initial interest confusion theory may be unnecessary to resolve cases involving the unauthorized use of a trademark as a domain name. In fact, traditional notions of trademark infringement law and multi-factor likelihood of confusion tests may adequately address the balancing of interests required in cases where courts must define the boundaries of trademark owners’ protection against the use of their marks in the domain names of competing websites. The Federal Trademark Dilution Act (FTDA)3 and the Anticybersquatting Consumer Protection Act (ACPA)4 provide additional protection against the unauthorized use of domain names that dilute famous marks or evidence a bad ∗ Mr. -
The Secondary Market for Domain Names”, OECD Digital Economy Papers, No
Please cite this paper as: OECD (2006-04-12), “The Secondary Market for Domain Names”, OECD Digital Economy Papers, No. 111, OECD Publishing, Paris. http://dx.doi.org/10.1787/231550251200 OECD Digital Economy Papers No. 111 The Secondary Market for Domain Names OECD Unclassified DSTI/ICCP/TISP(2005)9/FINAL Organisation de Coopération et de Développement Economiques Organisation for Economic Co-operation and Development 12-Apr-2006 ___________________________________________________________________________________________ _____________ English - Or. English DIRECTORATE FOR SCIENCE, TECHNOLOGY AND INDUSTRY COMMITTEE FOR INFORMATION, COMPUTER AND COMMUNICATIONS POLICY Unclassified DSTI/ICCP/TISP(2005)9/FINAL Working Party on Telecommunication and Information Services Policies THE SECONDARY MARKET FOR DOMAIN NAMES English - Or. English JT03207431 Document complet disponible sur OLIS dans son format d'origine Complete document available on OLIS in its original format DSTI/ICCP(2005)9/FINAL FOREWORD This report was presented to the Working Party on Telecommunications and Information Services Policies (TISP) in December 2005 and was declassified by the Committee for Information, Computer and Communications Policies (ICCP) in March 2006. This report was prepared by Ms. Karine Perset, with the participation of Mr. Dimitri Ypsilanti, both of the OECD's Directorate for Science, Technology and Industry. This report is published on the responsibility of the Secretary-General of the OECD. 2 DSTI/ICCP(2005)9/FINAL © OECD/OCDE 2006 3 DSTI/ICCP(2005)9/FINAL