- Ssr2-review - lists.icann.org

New Tracking Mechanism for Tracking SSR2-RT Requests
by Karen Mulberry June 28, 2017

June 28, 2017

Attached is the slide that Charla Shambley shared with the SSR2-RT during its June 26th session in Johannesburg. This is a high-level overview of the improvements we are making to how we track requests from all Review Teams, including SSR2. These changes are geared toward creating a consolidated view, to help everyone make sure that there is a clear understanding of the request, the time needed to fulfill it, the party responsible for getting it done and the status of work. I am confident that this mechanism will be a useful tool to help manage requests and timely delivery. The Tracking Mechanism slide provides the highlights of our process. We will keep you apprised when the new tracking table will be posted on the SSR2 wiki. Karen Mulberry Director, Multistakeholder Strategy and Strategic Initiatives (MSSI) ICANN 12025 Waterfront Dr., Suite 300 Los Angeles, CA 90094 Phone: +1 424 353 9745

4 3

FW: Follow up to question from James Gannon during SSR2 WG session
by Karen Mulberry June 27, 2017

June 27, 2017

Please note the response to the question that was asked by James during the SSR1 Briefing. Karen Mulberry Multistakeholder Strategy and Strategic Initiatives (MSSI) ICANN From: Xavier Calvez <xavier.calvez(a)icann.org> Date: Tuesday, June 27, 2017 at 4:38 PM To: Karen Mulberry <karen.mulberry(a)icann.org> Cc: Becky Nash <becky.nash(a)icann.org>, James Gannon <james(a)cyberinvasion.net> Subject: Follow up to question from James Gannon during SSR2 WG session Karen, During the session “SSR1 Briefings to SSR2 Review Team” in Johannesburg on Sunday 25/6, James Gannon asked what composed the amount of Professional Services budget of $2.3m for FY17, which presented on 1 of the slides. Please see below the answer. The amount of FY17 Professional Services budget ($2.3m) comprises the following main items: - data escrow services: $930k - WHOIS studies (ARS design/analysis, parsing, accuracy testing, ARS phase 3): $638k - EBERO services: $353k - Background checks for registrar accreditation: $100k The above items add up to $2.0m. The remaining professional services included in the total are miscellaneous smaller items. Let me if there is any further question. Copying James here as I have his email address, but please make sure to publish the response for the entire SSR2 team to see. Thank you. Best, Xavier Xavier Calvez ICANN – SVP & CFO 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: 310-301-5838 Mobile: 805-312-0052 Fax: 310-957-2348

1 0

Re: [Ssr2-review] Response to Action Item: ITHI
by Denise Michel June 27, 2017

June 27, 2017

Thanks for this, Steve. Could you please clarify when ITHI will start regularly publishing (or giving the public access to) data? It seems that the “schedule” below is about discussions rather than production, or am I misunderstanding? Best, Denise Denise Michel Domain Name System Strategy & Management Facebook, Inc. denisemichel(a)fb.com<mailto:denisemichel@fb.com> From: <ssr2-review-bounces(a)icann.org> on behalf of Steve Conte <steve.conte(a)icann.org> Date: Monday, June 26, 2017 at 1:23 PM To: SSR2 <ssr2-review(a)icann.org> Subject: [Ssr2-review] Response to Action Item: ITHI Hi All, In regards to the open action item: Provide the SSR2 RT a timeline of the ITHI project, when they have clarity on next steps and schedules. Please see the following response: The ITHI timeline at this point remains tentative. Much depends on where the community wants to go and on the availability of some of the registrar data (i.e. whois rate limiting issue). Here is what we expect to do this calendar year: 1) September/October time frame: - ITHI workshop with abuse community, tentatively a joint workshop with M3AAWG and/or a workshop at ICANN’s office in DC 2) ICANN 60 in Abu Dhabi: IHTI workshop - a) Study of whois inaccuracy complaints covering all registries and all registrars - b) Study of abuse tracking separately spam, phish, malware and botnets for all gTLDs, introduction of a graphical representation model tracking the data. - c) Potentially extending the same study to all registrars if whois data becomes available Presentation of candidate metrics and early measurements covering the other areas highlighted in the health definitions: - d) Study and measurement of “useful” vs “extra-omnerous” traffic at the root servers - e) Study and measurement of ICANN DNS registries, and how those parameters are actually used in observed traffic at the DNS root. - f) Study and measurement of leakage (i.e. TLDs that are not registered but tentative resolution is observed at the root) 3) Future work: - Start tracking (and publishing) the above data to build a time series, in particular for 2a) and 2b) - Work on a solution for 2c) - Refine 2d), 2e), 2f) The RIRs are working independently on the number track. I’ve reached out to them for a timeline but got no response so far. At some point, the ICANN track and the RIR track will have to converge. Further Information from the NRO We now have an RIR staff draft of ITHI metrics and my best estimate is that we will be proceeding as follows - - Q3 2017 Conduct Community Consultation on the ITHI draft and measurement matrix - Q3 2017 Incorporate community input into the paper - Q4 2017 Hand off to the RIR engineering teams for implementation in accordance with guidance from the NRO EC - H1 2018 tentative deployment ----- Steve Conte steve.conte(a)icann.org<mailto:steve.conte@icann.org>

1 0

Re: [Ssr2-review] Response to Action Item: ITHI
by Denise Michel June 26, 2017

June 26, 2017

Thanks, Steve Denise Michel Domain Name System Strategy & Management Facebook, Inc. denisemichel(a)fb.com<mailto:denisemichel@fb.com> From: <ssr2-review-bounces(a)icann.org> on behalf of Steve Conte <steve.conte(a)icann.org> Date: Monday, June 26, 2017 at 1:23 PM To: SSR2 <ssr2-review(a)icann.org> Subject: [Ssr2-review] Response to Action Item: ITHI Hi All, In regards to the open action item: Provide the SSR2 RT a timeline of the ITHI project, when they have clarity on next steps and schedules. Please see the following response: The ITHI timeline at this point remains tentative. Much depends on where the community wants to go and on the availability of some of the registrar data (i.e. whois rate limiting issue). Here is what we expect to do this calendar year: 1) September/October time frame: - ITHI workshop with abuse community, tentatively a joint workshop with M3AAWG and/or a workshop at ICANN’s office in DC 2) ICANN 60 in Abu Dhabi: IHTI workshop - a) Study of whois inaccuracy complaints covering all registries and all registrars - b) Study of abuse tracking separately spam, phish, malware and botnets for all gTLDs, introduction of a graphical representation model tracking the data. - c) Potentially extending the same study to all registrars if whois data becomes available Presentation of candidate metrics and early measurements covering the other areas highlighted in the health definitions: - d) Study and measurement of “useful” vs “extra-omnerous” traffic at the root servers - e) Study and measurement of ICANN DNS registries, and how those parameters are actually used in observed traffic at the DNS root. - f) Study and measurement of leakage (i.e. TLDs that are not registered but tentative resolution is observed at the root) 3) Future work: - Start tracking (and publishing) the above data to build a time series, in particular for 2a) and 2b) - Work on a solution for 2c) - Refine 2d), 2e), 2f) The RIRs are working independently on the number track. I’ve reached out to them for a timeline but got no response so far. At some point, the ICANN track and the RIR track will have to converge. Further Information from the NRO We now have an RIR staff draft of ITHI metrics and my best estimate is that we will be proceeding as follows - - Q3 2017 Conduct Community Consultation on the ITHI draft and measurement matrix - Q3 2017 Incorporate community input into the paper - Q4 2017 Hand off to the RIR engineering teams for implementation in accordance with guidance from the NRO EC - H1 2018 tentative deployment ----- Steve Conte steve.conte(a)icann.org<mailto:steve.conte@icann.org>

1 0

Response to Action Item: ITHI
by Steve Conte June 26, 2017

June 26, 2017

Hi All, In regards to the open action item: Provide the SSR2 RT a timeline of the ITHI project, when they have clarity on next steps and schedules. Please see the following response: The ITHI timeline at this point remains tentative. Much depends on where the community wants to go and on the availability of some of the registrar data (i.e. whois rate limiting issue). Here is what we expect to do this calendar year: 1) September/October time frame: - ITHI workshop with abuse community, tentatively a joint workshop with M3AAWG and/or a workshop at ICANN’s office in DC 2) ICANN 60 in Abu Dhabi: IHTI workshop - a) Study of whois inaccuracy complaints covering all registries and all registrars - b) Study of abuse tracking separately spam, phish, malware and botnets for all gTLDs, introduction of a graphical representation model tracking the data. - c) Potentially extending the same study to all registrars if whois data becomes available Presentation of candidate metrics and early measurements covering the other areas highlighted in the health definitions: - d) Study and measurement of “useful” vs “extra-omnerous” traffic at the root servers - e) Study and measurement of ICANN DNS registries, and how those parameters are actually used in observed traffic at the DNS root. - f) Study and measurement of leakage (i.e. TLDs that are not registered but tentative resolution is observed at the root) 3) Future work: - Start tracking (and publishing) the above data to build a time series, in particular for 2a) and 2b) - Work on a solution for 2c) - Refine 2d), 2e), 2f) The RIRs are working independently on the number track. I’ve reached out to them for a timeline but got no response so far. At some point, the ICANN track and the RIR track will have to converge. Further Information from the NRO We now have an RIR staff draft of ITHI metrics and my best estimate is that we will be proceeding as follows - - Q3 2017 Conduct Community Consultation on the ITHI draft and measurement matrix - Q3 2017 Incorporate community input into the paper - Q4 2017 Hand off to the RIR engineering teams for implementation in accordance with guidance from the NRO EC - H1 2018 tentative deployment ----- Steve Conte steve.conte(a)icann.org<mailto:steve.conte@icann.org>

1 0

Johannesburg Meeting Details - afternoon session
by Yvette Guigneaux June 26, 2017

June 26, 2017

Hi All - We're getting ready to start the meeting for the afternoon session - here is the adobe room link - https://participate.icann.org/ssrreview. Thank you. Kind Regards, Yvette Guigneaux (MSSI) Multistakeholder Strategy & Strategic Initiatives Projects & Operations Assistant. ICANN - Internet Corporation for Assigned Names and Numbers Email: yvette.guigneaux(a)icann.org Cell: +1-310-460-8432 Skype: yvette.guigneaux.icann www.icann.org<http://www.icann.org/> [cid:image001.png@01D2EE7E.F0C70330]

1 0

Re: [Ssr2-review] [EXT] Directions to IL Paviglione Room
by Barrett, Kerry-Ann June 26, 2017

June 26, 2017

Good morning/ afternoon all Regrettably I was hoping to join today but returned from out of state later than anticipated. I will log in for the last 2 hours and listen to the recordings. Again sincerest apologies. Sincerely, Kerry-Ann Barrett Cybersecurity Policy Specialist On Jun 26, 2017, at 2:42 AM, Jennifer Bryce <jennifer.bryce(a)icann.org<mailto:jennifer.bryce@icann.org>> wrote: Hi all, You can access the Michelangelo Hotel through the Sandton skybridge on the 3rd floor of the Convention Center. Follow the mall through to the hotel lobby and through to the elevators. A hotel staff member will let you up the elevators to the first floor. Once you reach the first floor turn right out of the elevators and right along the hallway. The room - IL Paviglione - is on your right. -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org<mailto:jennifer.bryce@icann.org> Skype: jennifer.bryce.icann www.icann.org<http://www.icann.org> _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> https://mm.icann.org/mailman/listinfo/ssr2-review

1 0

Directions to IL Paviglione Room
by Jennifer Bryce June 26, 2017

June 26, 2017

Hi all, You can access the Michelangelo Hotel through the Sandton skybridge on the 3rd floor of the Convention Center. Follow the mall through to the hotel lobby and through to the elevators. A hotel staff member will let you up the elevators to the first floor. Once you reach the first floor turn right out of the elevators and right along the hallway. The room - IL Paviglione - is on your right. -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Updated Mon agenda
by Denise Michel June 26, 2017

June 26, 2017

Below, per our discussion. Denise Michel Sent via phone ________________ Security Review Team (SSR2) Face-to-Face Meeting Johannesburg 25 – 26 June 2017 Agenda Monday 26 June 9:00 Welcome, Rollcall 9:15 Discussion of Board letter 10:00 Subtopic group work – break into groups, identify tasks, develop workplan & timeline · Review implementation of the first Security Review Team’s report (SSR1) · ICANN security processes · ICANN DNS security coordination processes · Future threats and challenges · IANA transition impact Review SubTopic groups’ progress, address questions/issues, integrate work plans and timelines Team Lunch (12:30 – 13:15) 13:15 Address Scope of Work, Workplan, Timeline, as needed 15:00 Next steps and support needs – identify information gathering, briefings, research requests, staff support, project management tools, other resources, if needed 16:00 A.O.B, Recap of action items, Review ICANN meeting agenda for relevant sessions 17:00 Adjourn

1 0

26 June meeting draft slides
by Jennifer Bryce June 25, 2017

June 25, 2017

Hi all, Please find draft slides for tomorrow’s (26 June, Plenary #17 day 2) meeting attached. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0