Eco - Association of the German Internet Industry - ATU / ISOC Seminar on Combating Spam

eco – Association of the
German Internet Industry
ATU / ISOC Seminar on Combating Spam
Hilton Hotel, Nairobi
September 9, 2013

We are shaping the Internet

                              ! Largest ISP association in the world
                              ! More than 600 members worldwide
                              ! Expert know-how in
    Harald A. Summa             13 Competence Groups
    CEO                       ! Services for companies and consumers
                              ! Political lobbying on international
                                platforms
                              ! Networking for industry stakeholders at
                                annually over 80 events

We develop markets, promote technologies and create Frameworks.

eco Anti Spam Initiatives
                                   How it all started
                                   ! Hotline to report illegal contents
                                     established in 1996, since 1999 co-
                                     funded by European Commission
                                   ! Spam-“flood“ in 2002 led to extention of
www.internet-beschwerdestelle.de     remit to Spam
          hotline@eco.de
                                   ! 2 analysts, about 200 reports per day,
                                     but always only about 20% valid
                                   ! restricted to German language UCE
                                   ! After header and content analysis:
                                     ! Report anonymized List Spam to
                                       sender, email provider, owner /
                                       registrant and host provider of
                                       promoted website
                                     ! Botnet Spam to originating ISPs

eco Anti Spam Hotline

                                   ! Drop in List Spam by 50% after first
                                     contact with sender
                                   ! Many senders apparently unaware of
www.internet-beschwerdestelle.de
                                     legal situation
          hotline@eco.de           ! Other spammers either did not react or
                                     were proactigely resistant
                                   ! German Anti Spam Alliance was born in
                                     June 2005

German Anti Spam Alliance
                                   ! In suspected Spam cases, complainants
                                     are asked to submit a statutory
                                     declaration, documenting that delivery of
                                     the email in question was unjustified
www.internet-beschwerdestelle.de
          hotline@eco.de
                                   ! Cease and desist order against sender

                                   ! If declaration of discontinuance is not
                                     signed by sender, case is prepared for
                                     court action and sent to Federal
                                     Consumer Protection Agency (vzbv) or
                                     Agency Against Unfair Competition
                                     (WBZ), who will take it to court

German Anti Spam Alliance
                                   ! >90% of all cases walk-through wins

                                   ! Advantage to consumer action: Sender
                                     will be convicted to pay up to 50 000 €
www.internet-beschwerdestelle.de     for each case of unjustfied emails
          hotline@eco.de

                                   ! Burden of proof is on sender

                                   ! >200 German Spammers have been
                                     sued so far

                                   ! Support of industry actions (e.g.
                                     Microsoft Hotmail Spam test-buys)

Supporting Actions

! Information of users and ISPs
  ! Regular awareness raising campaigns
     (e.g. on Safer Internet Day)
  ! Best Practice Papers in German and
     English (e.g. Anti Spam Guide, Anti
     Spam Whitepaper)

! Since 2003: Annual international „Anti
  Spam Summit“ in September (after 2010
  named Internet Security Days – three
  days, and with a focus on security
  issues)

Projects to address List Spam
and Botnet Spam

! ESPs filtering Spam create large
  amounts of false positives
! Senders annouce every bulk-mail
  campaign to ESPs, thus using valuable
  resources on both sides
! Certified Senders Alliance
  (www.certified-senders.eu) brought relief
  – and order

Whitelisting once

    www.certified-senders.eu

Centralised Whitelisting

       www.certified-senders.eu

Certified Senders Alliance Technicalities
!   Sender IPs                  !         Complaints procedure against
    ! maintained by eco                   warnings
    ! downloaded and updated by
      ISPs daily                !         Currently >100 senders and
                                          24 ISPs in 13 countries
!   Different reputation mechanisms
                                      !   Outreach to about 300 millionen
!   Certification process                 inboxes, 70% of the German
    ! legal                               market
    ! Technical
                                      !   Free of charge for ISPs
!   Open standards
    ! XLM, SMTP, SSL                  !   Discount for senders who are
    ! IP-based filtering more             members of eco or cooperating
      effective: No changes to            dialogue marketing associations,
      SMTP necessary                      e.g. DDV (Germany) or DMVÖ
                                          (Austria)

CSA Self Regulation Effects

!   Guarantee for senders to reach
    recipients
!   CSA soon has become a sought
    after certification brand which
    improves market reputation
!   Naming and shaming of CSA
    rule-violators
!   Legally unclear areas clarified by
    contractual agreement
!   IPTVGames
!   Whitelisting more effective than
    blacklisting
!   Internet marketing cathalyser,
    particularly for SMEs

What else did we think helps against List
Spam, and maybe Botnet Spam, forfeiture
and all other evils of he world?

The European Spambox Project
„Enforcement without borders“

Initiiated and coordinated by eco
and NASK (Polish academic
network)

Co-funded by the European
Commission and Microsoft

Mission Statement

! Facilitate evidence-gathering and
  exchange of information when legal
  action is taken against spammers and
  their beneficiaries

! Provide for an international source of
  information to monitor the number of
  spam complaints / the size of the
  problem

! Deter potential spammers

General idea

 Complainant   Complainant   Complainant   Complainant   Complainant   Complainant   Complainant

National Spambox A                National Partner B               National Partner C

     Plaintiff ISP              Plaintiff Company                Public Authority

Technical tools

! shared.brain (with Bizanga)

! Anti Botnet Advisory Centre (botfrei.de)

! Initiative-S

! Advanced Cyber Defense Centre
  (ACDC)

Engagement in stakeholder
groups
! European Contact Network of Spam
  Enforcement Authorities (CNSA)

! London Action Plan (LAP)

! Message Malware Mobile Anti Abuse
  Working Group (www.m3aawg.org)

! Anti Phishing Working Group
  (www.apwg.org)

! Online Trust Alliance (OTA)

Contact

eco – Association of the German Internet
  Industry

http://international.eco.de

Lichtstrasse 43h
50825 Cologne
Germany

Tel +49 (0) 221 – 7000 48-0
Fax +49 (0) 221 – 7000 48-111

info@eco.de