Messaging Malware Mobile Anti-Abuse Working Group

MAAWG is the acronym for Messaging Anti-Abuse Working Group, which is a non-profit international organization primarily engaged in preventing online abuses such denial of service attacks, phishing, spam, viruses and many other cyber crimes. The organization uses industry collaboration, technology, and public policy to provide solutions related to online messaging abuses. MAAWG was founded in 2004 and its headquarters is located in San Francisco, California.

Industry:	Internet
Founded:	2004
Headquarters:	San Francisco, California
Country:	USA
Website:	www.maawg.org
Key People
Jerry Upton, Executive Director Michael O’Reirdan, Chairman Alex Bobotek, Co-Vice Chairman Chris Roosenraad, Co-Vice Chairman Dave Crocker, Senior Advisor

Since its establishment, MAAWG has been active in helping protect internet users and promote online security by publishing documents regarding the improvement of online security. It also publishes a quarterly e-mail metrics report that covers around 500 million mailboxes. It is used to analyze the trend and to track dangerous e-mail abuses. MAAWG also provides comments on public policies and provides training courses related to cyber security. Its documents are published in different languages including Arabic, Chinese, French, German,Portuguese, Russian, and Spanish.

The members of MAAWG are categorized as Sponsor, Full Member and Supporter. Some of the organizations sponsor members are AOL, AT&T, France Telecom, Cloudmark Inc., Facebook, Yahoo!. The members of the organization meet three times a year to discuss the latest issues on messaging security, bot mitigation practices, social networking abuse as well as on-going policies and legislation conducted by different governments and other organizations involved in cyber security.

ICANN Involvement

The Messaging Anti-Abuse Working Group actively shares its commentaries on various ICANN policies. On July 28, 2010, MAAWG praised the Internet governing body's initiative in preparing an initial report regarding its plans to improve the Registration Accreditation Agreement. MAAWG supported the issues identified as high priority on the Initial Report on Proposals for Improvements to the RAA and emphasized that these should be incorporated into the new RAA. These issues include:

• Leave it to registrars to investigate malicious conduct
• A competent technical point of contact on malicious conduct issues should be designated and available 24/7
• Registrars should ensure the availability of privacy/proxy services on registration such as data escrow, relay function and reveal function
• Registrars have the right to cancel registrations made by other privacy/proxy services for noncompliance with Relay and Reveal under proper circumstances
• Identify situations requiring registrars to cancel registrations with fraud or false Whois data provided
• PCI compliance should be required in the registration process
• Provide a clear definition for "reseller" and registrar's responsibility for reseller compliance
• Registrars should be required to fully disclose affiliates/multiple accreditations as well as the registrar contact information, type of business organization,officers, etc

MAAWAG also provided comments on the following issues:

• ICANN Study on the Prevalence of Domain Names Registered using a Privacy or Proxy Registration Service among the top 5 gTLDs -MAAWAG commented that the result of ICANN's study that approximately 20% of domains use proxy or privacy service is consistent with their observation including the fact that majority of those 20% do not provide any information regarding the beneficial user's identity. In addition. MAAWAG encouraged ICANN to further investigate if there are TLDs/Registrars with disproportionately high or low number of proxy or privacy registration. Furthermore, the organization also agree that ICANN's plan to conduct further proxy/privacy study to document the relay and reveal practices of proxy/privacy services is important and encouraged ICANN to implement its plan the soonest possible time.
• ICANN’s proposed 2011 Plan for Enhancing Internet Security, Stability and Resiliency- MAAWAG concurred that ICANN should define its limited role in security, stability and resiliency of the internet in the 2009 plan to avoid "mission creep" into inappropriate areas. MAAWAG also emphasized that ICANN must recognize the extent of mission and role in relationship with other organizations. The organization cited that ICANN's primary mission is related to the domain name system and its role is to ensure that the stability, security, resilience and scalability of the internet is always maintained. MAAWAG also pointed that ICANN's is also responsible in collaborating with different organizations, government agencies and the global internet community in fighting against abuse of the DNS.
• ICANN Whois Review Team- MAAWAG recommended that ICANN should require registries to adopt the "thick" Whois Service to be able to provide reliable service and standardized report formats. The organization is against the proposal that only law enforcement agencies are allowed to have access to the Whois database and suggested that the accuracy and reliability of the Whois service should be maintained.In addition, MAAWAG encouraged ICANN to provide a quarterly summary report on the volume of inaccuracy incident reports received through the WHOIS Data Problem Reporting System (WDPRS) and encouraged the Whois Review Team to include technological improvements on the Whois service.
• ICANN’s Draft FY2012 Budget

MAAWAG reviewed the proposed ICANN budget for fiscal year 2012 and emphasized that the organization commended the global internet governing body's budget allocation on important areas as its priority such as:

1. Registrar Oversight
2. Whois Operation and Usability
3. Scalable access to zone file data given the imminent addition of new gTLDs
4. Cooperation with law enforcement, government regulators, and non-governmental organizations to prevent or respond to cybercrime and Internet abuse

MAAWAG also observed a 17.9% increase on the budget allocated for Global Engagement and International Participation compared with the FY 2011 budget however, the organization noted that no specific budget has been allocated to improve the zone file access and the effort provided to reach out to law enforcement needs of the community is limited. In addition MAAWAG pointed out that ICANN's operating expenses increased by 13% but its revenue is only up by 6.5%. Given the facts, the organization suggested that ICANN should take necessary measures to reduce its expenditures or to increase its revenues.

Senior Technical Advisors

• Dr Richard Clayton, Security Researcher-University of Cambridge
• Dave Crocker, Brandenburg InternetWorking-Principal
• David Dagon, J.D. Florida State University College of Law
• John R. Levine, Taughannock Networks-Founder
• April Lorenzen, Internet Security Researcher
• Dr. Joe St Sauver, Manager Internet2 Security Programs