ISC Anti-Spam Activities and Progress

Li HongInternet Society of China

1.Overview2.Complaining and Reporting mechanism3.Technique Platform4.International cooperation

ISC Anti-Spam Activities and Progress

Anti-Spam Co-ordination TeamAnti-Spam Co-ordination Team 1st blacklist1st blacklist Reporting and

Complaint CenterReporting and Complaint Center

Shut down Open-Relay and Open-Proxy Shut down Open-Relay and Open-Proxy

Anti-Spam CommitteeAnti-Spam Committee

Comprehensive Handling PlatformComprehensive Handling Platform

November 2002

May 2003

August 2003

December 2005

February 2006

June 2006

1.1 Progress of Anti-Spam Activities

1.2 Main Tasks of Anti-Spam

1.3 Effect of Anti-Spam

According to a report of SOPHOS, the amount of spam sent out from China dropped by 5.8 percent in the second quarter of 2009 as compared with that in the end of 2008. The proportion is 4.1%.

USA

BRA

TUR

IND

KOR

POL

CHN

ESP

RUS

ITA

1.Overview2.Complaining and Reporting mechanism 3.Technique Platform4.International cooperation

ISC Anti-Spam Activities and Progress

2.1 Complaining and Reporting Center

Deal with reported spam Set up “12321 Unsolicited Electronic Messages Complaining and Reporting

Center” on Apr 28th, 2008. Up to the August of 2009, had received about 2,000,000 reports.

Introduction of “12321” Unsolicited Electronic Messages Complaining and Reporting Center” Authorized by Ministry of Industry and Information Technology (MII) Set up by Internet Society of China (ISC)

Sphere of Work E-mail Spam SMS Spam Malicious Software others

2.2 Five Contact Points for Reporting

Tel• 010-12321

WEB• www.12321.cn

E-mail•abuse@12321.cn

SMS• 12321

WAP•wap.12321.cn

Software• Am321 、 Ammail

2.3 Report via ESP

2.4 Processing Procedures of Reported Spam

ESPESP

“12321” identify and classify reported spam“12321” identify and classify reported spam

Enforcement agencies

Enforcement agencies ISP /ESPISP /ESP

illegal

illegal

unjustifiedunjustified

“12321”record and publish the results“12321”record and publish the results

feed backfeed back

feed backfeed back

Report

Report

Report

Report

produced blacklist by comprehensive anti-

spam handling platform

produced blacklist by comprehensive anti-

spam handling platform BlacklistBlacklist

1.Overview2.Complaining and Reporting mechanism 3.Technique Platform4.International cooperation

ISC Anti-Spam Activities and Progress

3.1 National Anti-Spam Forewarning System A project of National Anti-Spam Forewarning System is carrying out.

Macro or mass analysis Collective Processing Analysis Status Tools Pre-controlling Countermoves

3.2 Comprehensive Handling Platform on Anti-Spam

Main function: Identify the reported spam samples Real-time publish the blacklist Publish the white-list Analyze state of global spam

3.3 Comprehensive Handling Platform on Anti-Spam

ReceiverReceiverFiltrate E-mail

accord-ing to

blacklist

Filtrate E-mail

accord-ing to

blacklist

Filtrate E-mail

accord-ing to ESP’s rules

Filtrate E-mail

accord-ing to ESP’s rules

Listed in white-

list

Listed in white-

list

Green channel for white-list member

Green channel for white-list member

UnknownUnknown

Listed in blacklistListed in blacklist

SpamSpam

Legal Legal

ESP serverESP server

Such as: characteristics filtration, Bayesian algorithm, etc.

Such as: characteristics filtration, Bayesian algorithm, etc.

3.4 Process Procedure of IP blocked in blacklist

Blacklist of origin Public report Public report Countering

techniquesCountering techniques Domestic ESPDomestic ESP International

partner International

partner

Comprehensive handling platform on Anti-spam

Collect & Classify

Collect & Classify

Examine & Block

Examine & Block

ESPRefuse spam

according to the blacklist

Refuse spam according to the

blacklist

1.Overview2.Complaining and Reporting mechanism 3.Technique Platform4.International cooperation

ISC Anti-Spam Activities and Progress

4.1 International cooperation

Built up international cooperation with Japan, Korea, the United States, Australia, Vietnam, the United Kingdom, and Brazil more than 10 international anti-spam organizations.

Take part in the International Telecommunication Union Internet Govern Forum

Participating in international anti-spam standard establishment, Technical Framework for Countering Email Spam (X.fcs)formally adopted by the International Telecommunication Union In April,2008

4.2 International cooperation

Cooperation with the Technique Platform. Spam data sharing. Blacklist improvement. Whitelist recommendation. Other Public Resource

Cooperation with the Anti-spam company or organization. MAPS. Spamhause.

Thanks!