Line 129: |
Line 129: |
| | | |
| ''Are new or Legacy gTLDs experiencing more problems?'' | | ''Are new or Legacy gTLDs experiencing more problems?'' |
− | The February 2021 DAAR report indicates the majority (64.8%) of security issues are occurring in legacy [[TLDs]], which comprise 88.8% of resolving gTLD domains in zone files.<ref>[https://www.icann.org/en/system/files/files/daar-monthly-report-28feb21-en.pdf DAAR monthly report Feb 2021]</ref> | + | The February 2021 [[DAAR]] report indicates the majority (64.8%) of security issues are occurring in legacy [[TLDs]], which comprise 88.8% of resolving gTLD domains in zone files.<ref>[https://www.icann.org/en/system/files/files/daar-monthly-report-28feb21-en.pdf DAAR monthly report Feb 2021]</ref> |
| + | |
| + | On January 31, 2022, the [[European Commission]] published a [https://op.europa.eu/en/publication-detail/-/publication/d9804355-7f22-11ec-8c40-01aa75ed71a1/language-en/format-PDF/source-search Study on DNS Abuse], conducted by Fasano Paulovics Società tra Avvocati and Institut Polytechnique de Grenoble. Its key findings included:<ref>[https://op.europa.eu/en/publication-detail/-/publication/d9804355-7f22-11ec-8c40-01aa75ed71a1/language-en/format-PDF/source-search Study on DNS Abuse Technical Report Appendix 1, Directorate-General for Communications Networks, Content and Technology (European Commission), Fasano Paulovics Società tra Avvocati, Grenoble INP-UGA Institute of Engineering 2022-01-31]</ref> |
| + | # The overall health of [[TLD]]s: |
| + | #* nTLDs, 6.6% of the market, are the most abused group of TLDs. In 2021, 20.5% of all abused domain names were registered in new gTLDs. Specifically, the two most abused nTLDs together account for 41% of all nTLD abuse. |
| + | #* EU ccTLDs are the least abused; only 0.8% of all abuse ([[Compromised Domain]]s and [[Malicious Domain]]s) were registered under EU ccTLDs. |
| + | # [[Malicious Domain]]s and [[Compromised Domain]]s: |
| + | #* Most [[spam]] and [[Botnet Attacks|botnet]] control and command [[domain name]]s are maliciously registered. |
| + | #* Almost 25% of [[phishing]] domain names and 41% of [[malware]] are registered by legitimate users. They are compromised at the hosting level and thus cannot be addressed at the [[DNS]] level without collateral damage. |
| + | #* 42% of hacked websites occur among more frequently used TLDs. In less-used new gTLDs, hackers directly register domains for malicious activities. |
| + | #* [[Registries]] and [[registrars]] can act at the DNS level but not on the hosting infrastructure unless they also offer hosting services. |
| + | #* The top five most abused registrars account for 48% of all maliciously registered domain names. |
| + | #* Phishers use free subdomain and hosting providers, which do not work well for spammers and botnet C&C activity. |
| + | # Adoption of [[DNSSEC]] and mail protection protocols: |
| + | #* DNSSEC adoption remains low. Of 227 million domain names, only 9.4 million meet all required resource records; however, 98% of them are correctly signed and validated. |
| + | #* In Europe, [[.cz]] (59%), [[.se]] (55%), [[.nl]] (51%), and [[.sk]] (48%) have the highest adoption of DNSSEC and offer price incentives and technical support. |
| + | #* Around the world, 2.5 million open DNS resolvers can be used as amplifiers in [[DDoS Attack]]s. |
| + | #* 60% of 247 million domain names do not use SPF and 97% do not use DMARC records to prevent [[Cybercrime|Email Spoofing and Business Email Compromise]] scams |
| | | |
| ==References== | | ==References== |
| | | |
| [[Category:Practices]] | | [[Category:Practices]] |