Bureaucrats, steward, Administrators, translator
2,354
edits
Changes
Added content
===Areas of expertise===
===Areas of expertise===
*'''DNS Abuse''': studying of various harmful activities that involve DNS, for example, botnets, phishing, malware, pharming, and spam.
*'''DNS Abuse''': studying of various harmful activities that involve DNS, for example, botnets, [[phishing]], [[malware]], [[pharming]], and [[spam]].
*'''Internet measurements''': software development and provision of other tools to efficiently measure different aspects of Internet protocols.
*'''Internet measurements''': software development and provision of other tools to efficiently measure different aspects of Internet protocols.
*'''Vulnerability notifications''': identification of security issues in the wild and regular notification for the owners of vulnerable resources.
*'''Vulnerability notifications''': identification of security issues in the wild and regular notification for the owners of vulnerable resources.
==Funded Projects==
==Funded Projects==
===NetBeacon MAP===
:''Main article: [[NetBeacon MAP]]''
NetBeacon MAP, formerly '''DNSAI:Compass''' until June, 2023 and '''DNSAI Intelligence''' until September, 2022, is a collaboration between KOR Labs and the [[NetBeacon Institute]]. KOR Labs is responsible for collecting the data, which is then provided to the Institute, that works with [[PIR]]’s Data Analytics team to create interactive charts, reports, and individualized dashboards to measure and track the use of the DNS for phishing and malware <ref name="mapintro">[https://netbeacon.org/map-analytics/ Map Introduction]</ref>.
===INFERMAL===
INFERMAL (Inferential Analysis of Maliciously Registered Domains) is a research project being carried out by KOR Labs and funded by [[ICANN]]. The goal of this project is to conduct an in-depth analysis of maliciously registered domain names, aiming to uncover cyber attackers' preferences and possible measures to mitigate abusive activities within the domain name space. The first meeting for this project happened in November, 2022, <ref>https://infermal.korlabs.io/</ref> and it was announced in April, <ref>2023 https://korlabs.io/blog/new-icann-project-infermal.html</ref>.
===Cyber Threat Intelligence===
===Cyber Threat Intelligence===
Cyber Threat Intelligence is a project funded by France 2030, supported by France Relance - European Union <ref name="cyberthreat">[https://korlabs.io/about.html About Cyber Threat]</ref> and led by the technology company Thales, organizer of the consortium which includes KOR Labs. It was announced on April, 2023 <ref>https://www.thalesgroup.com/en/group/innovation/news/thales-launch-unique-collaborative-project-cyber-threat-intelligence</ref>. The aim of the project is to provide a set of cyber threat intelligence services for the French market, aimed at cybersecurity teams. KOR Labs is responsible for providing the platform with various data related to DNS Abuse: domain registration data, DNS records, host information, website data, ranking and popularity data. They also have participation in the design of data analysis algorithms for the Analysis Center. It will also develop reputation algorithms that will evaluate abuse rates among the various types of DNS intermediaries (TLD registries, registrars, and hosting providers) to establish their ranking <ref name="cyberthreat" />.
Cyber Threat Intelligence is a project funded by France 2030, supported by France Relance - European Union <ref name="cyberthreat">[https://korlabs.io/about.html About Cyber Threat]</ref> and led by the technology company Thales, organizer of the consortium which includes KOR Labs. It was announced in April, 2023 <ref>https://www.thalesgroup.com/en/group/innovation/news/thales-launch-unique-collaborative-project-cyber-threat-intelligence</ref>. The aim of the project is to provide a set of cyber threat intelligence services for the French market, aimed at cybersecurity teams. KOR Labs is responsible for providing the platform with various data related to DNS Abuse: domain registration data, DNS records, host information, website data, ranking and popularity data. They also have participation in the design of data analysis algorithms for the Analysis Center. It will also develop reputation algorithms that will evaluate abuse rates among the various types of DNS intermediaries (TLD registries, registrars, and hosting providers) to establish their ranking <ref name="cyberthreat" />.
===ThreatChase===
===ThreatChase===