Best Practice Detail

13-8-8912

Service Providers should make reasonable efforts to communicate with other operators and security software providers, by sending and/or receiving abuse reports via manual or automated methods. These efforts could include information such as implementation of "protective measures" such as reporting abuse (e.g., spam) via feedback loops (FBLs) using standard message formats such as Abuse Reporting Format (ARF). Where feasible, ISPs should engage in efforts with other industry participants and other members of the internet ecosystem toward the goal of implementing more robust, standardized information sharing in the area of botnet detection between private sector providers.

Status: Rollover New

References/Comments: See the following document for more information: http://www.maawg.org/sites/maawg/files/news/CodeofConduct.pdf Vulnerabilities can be reported in a standardized fashion using information provided at http://nvd.nist.gov/ http://puck.nether.net/mailman/listinfo/nsp-security https://ops-trust.net/ https://www2.icsalabs.com/veris/ Note that the Best Practices in this grouping are primarily aimed at ISPs that provide service to consumer end-users on residential broadband networks, but may be applicable to other users and networks as well.

Historical events:

• Service Providers
• Internet/Data
• Cyber Security
• Industry Cooperation
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII