1. Summary of the « New gTLD Program Safeguards » context before the Statistical Analysis of DNS Abuse in gTLD
Farell FOLLY, Africa 2.0 Foundation
Web :

2. New gTLD Program Safeguards
Key Terms
New gTLD Program
New gTLD Program Safeguards
Stastistical Analysis of DNS Abuse in gTLD (SADAG)
Competition, Consumer Trust and Consumer Choice (CCT) Review Team

3. What is CCTRT ?
The Competition, Consumer Trust and Consumer Choice Review is mandated by ICANN Bylaws Section 4.6 (d) to examine the extent to which the introduction or expansion of gTLDs has promoted competition, consumer trust and consumer choice. It will also assess the effectiveness of the application and evaluation processes, as well as the safeguards put in place by ICANN to mitigate issues involved in the introduction or expansion of new gTLDs.

4. New gTLD Program
ICANN's New gTLD Program has enabled hundreds of new top-level domains to enter into the internet's root zone since the first delegations occurred in October Comprehensive reviews are currently underway in a number of areas, including:
Effects of the program on competition, consumer trust and consumer choice
Effectiveness of Rights Protection Mechanisms (RPMs) built in to the program
Stability of the DNS root zone
Effectiveness of the gTLD application and evaluation processes used in the Program
Operational aspects of the New gTLD Program in terms of efficiency, effectiveness and other areas.

5. New gTLD Program Safeguards
In accordance with section 9.3 of ICANN's Affirmation of Commitments (AoC) to promote competition, consumer choice, and consumer trust in the Domain Name System (DNS), this report is intended to aid the work of the review team on Competition, Consumer Choice, and Consumer Trust (CCT-RT). It will do so by:
Providing an overview of the state of DNS abuse following the roll-out of the New Generic Top-Level Domain (gTLD) Program in January 2012
Discussing options for measuring the effectiveness of nine safeguards put in place to mitigate DNS abuse in new gTLDs
Proposing a research model to help assess the effectiveness of the nine safeguards in mitigating DNS abuse in new gTLDs

6. New gTLD Program Safeguards
Public Comment : March (open) - June (close) - July 2016 (Final)
Explores methods for measuring the effectiveness of safeguards against Domain Name System (DNS) abuse that were implemented as part of the New gTLD Program
Explores which activites may constitue abuse and provide a prelimary literature review examining rates of abuse in new gTLD and the DNS as a whole
Intends to help inform the CCTRT analysis of how well program safeguards prevent DNS abuse
CCTRT is considering the report and the feedback as it continues to design its review of the New gTLD Program safeguards

7. Statistical Analysis of DNS Abuse in gTLD (SADAG)
Problem : Measuring the effectiveness of the technical safeguards
Absence of a comprehensive comparative study of DNS abuse in new and legacy gTLDs that would allow to assess the effectiveness of New gTLD Program safeguards
Challenges arose in definition and measurement of abusive activities, as some are considered abusive in some jurisdictions but not others.
Solution : Comprehensive DNS abuse study to support the CCTRT
To analyze levels of abuse in legacy and new gTLDs
And, consequently, to produce a baseline set of data for future analyses

8. Statistical Analysis of DNS Abuse in gTLD (SADAG)
The SADAG study serves to inform the CCTRT's analysis of potential factors explaining abuse rates in a given gTLD. The study analyzes rates of spam, phishing, and malware distribution in the global gTLD DNS from 2014 to 2016, distinguishing between legacy and new gTLDs.
The aim of this study is to enable the CCTRT to determine abuse level correlations between registries and registrars, gTLD zones, and, to the extent possible, corresponding safeguards. This research will also serve as a baseline for future CCTRTs and other review teams, including the Security, Stability and Resiliency Review Team, which began its work in March 2017.

9. Statistical Analysis of DNS Abuse in gTLD (SADAG)
The study provides measures and analysis of:
Absolute counts of abusive domains per gTLD and registrar from 1 January 2014 until 31 December 2016
Abuse rates, based on an "abused domains per 10,000" ratio (as a normalization factor to account for different TLD sizes), per gTLD and registrar from 1 January until 31 December 2016
Abuse associated with privacy and proxy services
Geographic locations associated with abusive activities
Abuse levels distinguished by "maliciously registered" versus "compromised" domains
Effects of DNSSEC, domain parking, and registration restrictions on abuse levels

10. Webography
abuse en
gtld-safeguards-dns-abuse-17jun16-en.pdf