[NCAP-Discuss] Honeypots: A Cost-Benefit Analysis (thought content)

[Thomas, Matthew]

NCAP DG,

First - Thank you Jeff for taking the time to construct this deck for the group's discussion.

I have imported Jeff's slides into the NCAP DG shared drive so we can more easily comment, edit, and incorporate to the Study 2 report as needed.  The slides can be viewed here: https://docs.google.com/presentation/d/1XfmkKCs-UiFxdAP2Yah4_ax-PUYpl2T7pZOeZPPZq58/edit#slide=id.g11514a647aa_2_115

Thanks,

Matt Thomas
NCAP Co-chair

On 2/17/22, 4:40 PM, "NCAP-Discuss on behalf of Jeff Schmidt via NCAP-Discuss" <ncap-discuss-bounces at icann.org on behalf of ncap-discuss at icann.org> wrote:

    Caution: This email originated from outside the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. 

    Team:

    Attached is my first shot at a direct cost-benefit comparison of 127/8 "controlled interruption" and the honeypot approach. I'm attempting to lay this out clearly so folks on this list (and the broader Community) understand and may discuss the tradeoffs; I imagine that a version of these tables could be included in our final report. SAC066 asked ICANN to "perform an evaluation of potential notification approaches..." so here is the start of that evaluation.

    I am not a Google tools person, so if it would be easier for someone to put this into the Google-verse somehow please feel free to do so. This is intended as a discussion facilitation tool - please feel free to agree, disagree, debate, etc. I'm happy to be wrong on anything in there, but we have to address it head-on. My intent is to stop the loop and enable progress and closure on this important topic.

    Thanks,
    Jeff