A new information system that is designed to provide prompt cooperation between competent organizations and accredited registrars is going to be launched soon on information and analytical portal Netoscope. The main task of this system is to provide registrars with the latest information about “bad” domains so that they can take measures as soon as possible. The competent organizations are able to address the registrar directly and resolve the problem as soon as it is discovered.
The new feature is an additional technical instrument in adopting the policy of the Coordination Center in the area of ccTLDs security.
“Logistics and prompt cooperation – this is what we have lacked. Quite a lot of time passed between the discovery of malware and its elimination. Sometimes this was enough time for criminals to cause trouble for users. At the moment the new feature is being tested, however, pretty soon all the accredited registrars and competent organizations will be able to use it. Ideally, registrar will receive the information about a “bad” domain right after its discovery, which will allow the registrar to promptly take action and thus significantly improve the safety and security of Russian Internet users”, said Andrei Kolesnikov, director at Coordination Center for TLD RU/РФ.
We remind that the number of domain names that pose cyber threats in the project Netoscope database from November 2012 till March 2015 is 1.7 million. For 2.5 years the database increased more than 2-fold and keeps growing. At the same time the share of domain names deleted from the database also grows. Thus, in March 2015 the share of domains deleted from the database was 42.1%. As of the moment GOV-CERT, Group-IB, Coordination Center, Kaspersky Lab, Mail.ru, Sputnik (Rostelecom), RU-CERT, Technical Center of Internet and Yandex take part in the project.
