tackling network abuse at its roots tobias knecht
TRANSCRIPT
![Page 1: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/1.jpg)
tack l i ng ne twork abuse a t i t s roo ts
Tobias Knecht
![Page 2: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/2.jpg)
X-ARFExtended Abuse Reporting
Format
![Page 3: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/3.jpg)
What it is?
![Page 4: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/4.jpg)
Why do we need it?
![Page 5: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/5.jpg)
How does it look like?
![Page 6: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/6.jpg)
Where do we want to go?
![Page 7: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/7.jpg)
Use Cases
![Page 8: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/8.jpg)
Use Cases
Attack Reporting
Abusive Content Reporting
Law Enforcement
Sinkhole Cleanups
... and many more
![Page 9: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/9.jpg)
Sinkholes
GrumBlack EnergyAlina
![Page 10: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/10.jpg)
![Page 11: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/11.jpg)
How do we report?
• Fetching logfiles on an hourly base
• Uniq IP addresses
• Package all information into X-ARF
• Lookup correct abuse contact
• Send report
![Page 12: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/12.jpg)
Decrease of >25%in less than 8 weeks
![Page 13: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/13.jpg)
Call for Action
Check out http://x-arf.org
Contribute ideas, help shaping it!
„Dirty“ Space? Sinkholes? Attack-Data?
Talk to us, we are happy to report it!
![Page 14: Tackling network abuse at its roots Tobias Knecht](https://reader035.vdocuments.mx/reader035/viewer/2022072006/56649f475503460f94c690ca/html5/thumbnails/14.jpg)
Tobias KnechtCEO
+49 (0)721 / 75 40 65 - [email protected]
http://www.abusix.comtwitter: @abusix
Thank You for Your Attention!