Fergie's Tech Blog

ICANN SSAC Report on Fast Flux Hosting and DNS

My old friend & colleague, Patrik Fältström, writes:

SSAC has released a report [.pdf] on Fast Flux that might be interesting to read for people that are trying to make it easier to find bad guys on the net. Fast flux implies rapid modification of IP addresses associated with a system that hosts a malicious activity, or hosts a domain name that is used for such activities. All to try to make it harder to find and close the services in question.

The report ends with the following:

"Fast flux hosting is a serious and mounting problem that affects name services in all GTLDs. SSAC encourages ICANN, registries and registrars to consider the practices mentioned in this Advisory, to establish best practices to mitigate fast flux hosting, and to consider incorporating such practices in future accreditation agreements."

posted by Fergie @ 1/30/2008 12:22:00 PM