<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Denise,<div><br></div><div>Thanks. I regret that I am caught in a conflict and cannot participate for much of this meeting. I see that Lyman Chapin is now moderating Session 3. IMO, that's an improvement, so you're in a very good shape.</div><div><br></div><div>Steve</div><div><br><div><div>On Mar 3, 2009, at 4:14 PM, Denise Michel wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>Greetings.<br><br>The main session of "e-Crime and Abuse of the DNS Forum: a global<br>perspective" scheduled for Wednesday, March 4, 14:00-18:00 in<br>Don-Alberto 2-4 (Main Room), will be scribed, and the transcript and<br>all presentations will be publicly posted at<br><<a href="http://mex.icann.org/node/2653">http://mex.icann.org/node/2653</a>>. Included below and attached in Word<br>is an updated agenda. I know that overlapping meetings have been<br>scheduled and not all interested community members will be able to<br>attend the Forum, but rest assured that all available information will<br>be publicly posted, including the results of the break-out sessions.<br><br>Regards,<br>Denise<br><br>Denise Michel<br>ICANN Vice President<br>Policy Development<br>-----------------------------------<br><br><br>e-Crime and Abuse of the DNS Forum: a global perspective<br><span class="Apple-tab-span" style="white-space:pre"> </span><br>Organized by ICANN Staff in Cooperation with the At-Large Summit<br><br>Wednesday, March 4<br>14:00-18:00<br>Hotel Sheraton Centro Historico<br>Don-Alberto 2-4 Conference Room<br><br>The Forum will provide participants with an opportunity to discuss<br>numerous global activities and issues related to e-Crime and DNS abuse<br>that involve a broad array of international stakeholders. While not<br>all of these issues fall within ICANN's narrow mission, the Forum is<br>intended to facilitate public dialogue and working relationships on<br>e-Crime and DNS abuse among members of the global Internet community,<br>as requested by the ICANN community.<br><br>Welcome Alejandro Pisanty (former Director, ICANN Board; National<br>University of Mexico) Time: 14:00 14:10<br><br>Alejandro Pisanty will provide an introduction to the Forum including<br>its format, aims, and objectives.<br><br>Session 1. The e-Crime Landscape (Time: 14:10 15:03)<br><br>Moderator: Cheryl Langdon-Orr (Chair, At-Large Advisory Committee) (14:10-14:13)<br><br>Panel: Beau Brendler (Consumer Reports WebWatch Project); Fred Felman<br>(MarkMonitor); and Jeffrey Bedser (Internet Crimes Group)<br><br>Introduction to E-Crime (20 minutes) (14:13 14:33)<br>Beau Brendler will provide an overview of the manner in which e-Crime<br>affects consumers as well as discuss activities that aim to educate<br>the public regarding e-Crime risks. Fred Felman will review recent<br>e-Crime trends, and highlight types of harms to end-users.<br><br>Sizing and Scoping e-Crime (20 minutes) (14:33-14:53)<br>Jeffrey Bedser will describe the e-Crime ecosystem and explain how<br>organized crime uses the Internet and the DNS to facilitate criminal<br>acts against end-users. Jeffrey will also discuss emerging legal<br>efforts that focus on protecting end-users against Internet-based<br>crime. Jeffrey will use the results of extensive attack traffic, DNS,<br>and domain name data analysis to illustrate that e-Crime is able to<br>exploit resources from virtually any user and provider in the global<br>Internet. He will describe how criminal attack network activity is<br>distinguished from legitimate (production) traffic. Jeffrey will also<br>show the hotspots for bot and malware activity and where domain names<br>are used to abet e-crime are registered.<br><br>Audience Questions (10 minutes) (14:53-15:03)<br><br>Session 2. Criminal Attacks and Abuse Response Today (Time: 15:03-16:11)<br><br>Moderator: Greg Rattray (Chief Internet Security Advisor, ICANN) Time:<br>15:03 15:06<br><br>Panel: Rod Rasmussen (Internet Identity); Tim Ruiz (GoDaddy), Greg<br>Aaron (Afilias), Law Enforcement (TBD); Vanda Scartezini (At-Large<br>Advisory Committee); Jeff Neuman (NeuStar); Oscar Robles-Garay<br>(NIC.mx)<br><br>Case studies in global criminal attacks (20 minutes) (15:06-15:26)<br>Rod Rasmussen will describe the chronology of events leading to the<br>discoveries and cessations of two noteworthy security incidents. He<br>will describe both the parties involved in, and the events leading up<br>to, the disconnection of the McColo hosting provider, and the<br>sustained disruption of Srizbi bot communications with their command<br>and control servers by preventing the automated registrations of<br>botnet domains. Rod will describe the events surrounding the attack<br>against the e-billing company, CheckFree, through its domain names,<br>the immediate effects, related phishing of registrars, and the<br>prospects for future, similar attacks against the financial sector and<br>end-users.<br><br>Abuse Response Today (30 minutes) (15:26-15:56)<br>The speakers will describe their respective roles in responding to,<br>and acting upon, criminal complaints where domain names are used to<br>abet criminal activities, and how to protect legitimate end-users from<br>erroneous shut-downs (false positives). A law enforcement expert will<br>describe the role of the private sector in cooperating with law<br>enforcement agencies, and in proactively responding to E-crime so as<br>to protect consumers.<br><br>Audience Questions (15 minutes) (15:56-16:16:11)<br><br>Session 3. Role of ICANN Stakeholders and Staff in Responding to<br>e-Crime (45 minutes) Time: 16:11-17:01<br><br>Moderator: Lyman Chapin (former Director, ICANN Board) (16:11-16:14)<br><br>Panel: Jon Nevett (Network Solutions); Garth Bruen (Knujon); Steve<br>Metalitz (Intellectual Property Constituency); David Giza (ICANN<br>Compliance Office); Roelof Meijer (SIDN); Adam Palmer (Public Interest<br>Registry); Rudi Vansnick (ISOC.be); Marc Ottawa (Royal Canadian<br>Mounted Police); Andy Steingruebl (PayPal); Tony Harris (Cabase)<br>(16:14-16:56)<br><br>The speakers will describe how current ICANN gTLD and ccTLD policies<br>and contractual obligations of registries and registrars help combat<br>E-crime. The role of ICANNs Compliance Office in reinforcing these<br>efforts, such as in the areas of WHOIS accuracy, and registrar breach<br>notices, will be explained. The speakers will also discuss the<br>efforts among industry groups to develop voluntary guidelines and<br>share data to enhance the private sectors responses to e-Crime.<br><br>Audience Questions (15 minutes) (16:56 17:01)<br><br>Next Steps e-Crime Break-Out Sessions (60 minutes) Time: 17:01 18:01<br><br>Instructions:<span class="Apple-tab-span" style="white-space:pre"> </span>Denise Michel, ICANN Vice President, Policy Development<br><br>The public will have an opportunity to participate in further detailed<br>discussion and exchange of information by joining one of several<br>break-out sessions on specific issues moderated by the individuals<br>identified below:<br><br><span class="Apple-tab-span" style="white-space:pre"> </span>Law Enforcement and ccTLDs (Marc Moreau and Erick Iriarte Ahon)<br><span class="Apple-tab-span" style="white-space:pre"> </span>Consumer Protection in Existing and New TLDs (Beau Brendler and<br>Holly Raiche, Executive Director, ISOC-AU)<br><span class="Apple-tab-span" style="white-space:pre"> </span>The Role of ICANN (Jon Nevett, Kristina Rosette, and Doug Brent,<br>Chief Operating Officer, ICANN)<br><span class="Apple-tab-span" style="white-space:pre"> </span>e-Crime in Latin America - conducted in Spanish (Vanda Scartezini<br>and Alejandro Pisanty)<br><br>The moderators of each break-out session will summarize any suggested<br>next steps and recommendations from their respective group during the<br>Public Forum.<br><span><Ecrime and Abuse of the DNS 3-1-09-Script.doc></span></div></blockquote></div><br></div></body></html>