Colleagues,
As you may remember the WG Co-Chairs have been talking to the NCC about some
possible Anti-Abuse training in March of this year.
This proposal got very little reaction from the community, so we are going to
try again to see if there is interest, or if people who are already on this
mailing list believe that there would be interest from other LIRs that they
know.
I have re-attached the proposal that Alireza sent to the mailing list in March.
Between now and RIPE 83 (when this matter will be on the WG session agenda) I
would ask the following questions:
1) Would training, as described, be of interest to you?
2) Would training, as described, be of interest to other LIRs you know of/work
with?
3) If not, would there be other areas of Anti-Abuse training that would be of
interest?
4) Would you be willing to help write training materials for this course?
After the list discussion and discussion at RIPE 83 the Co-Chairs will work
with the NCC Learning & Development Team to decide if there is enough interest
to develop the course and, if there is, how to proceed from there.
We really do believe this is something that would be of interest to a large
number of small LIRs in the region, but that's not something we can really
determine without the help of the WG
Thank you,
Brian
Co-Chair, RIPE AA-WG
Brian Nisbet (he/him)
Service Operations Manager
HEAnet CLG, Ireland's National Education and Research Network
1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland
+35316609040 brian.nis...@heanet.ie www.heanet.ie
Registered in Ireland, No. 275301. CRA No. 20036270
Context
The Internet is a complex ecosystem where many people and organisations
converge, with differing outlooks and motivations. While the vast majority of
these are for the general good, sadly that is not always the case. To deal with
this negative part, the RIPE Community created the Anti-Abuse Working Group
that aims to tackle online abuse from both the technical and non-technical
angles.
Some of the ideas that can be useful to understand the context of anti-abuse
and how important collaboration and mutual understanding is, are:
- Your outbound is somebodyâs inbound. And vice versa.
- My network, my rules. You want your rules accepted, accept the rules of
others as well.
- You define what abuse is. So do others. Be respectful and try to solve the
issues together.
- The community expects you to handle Abuse in your network and keep the
resources you have been granted clean
It is also not possible to have a one-fit-all definition of abuse. To say the
least it depends on the point of view, so you define when enough is enough.
Twitter has a different definition than a small LIR. While you have your
definition and Twitter has its own, don't judge another person for complaining
about what they define as abuse of their network. Be reasonable!
In addition to this, there are different types of resources to be considered.
For example, due to enormous IPv6 address space and v6 spammers constantly
changing their prefixes, it is not clear yet what are the best practices
fighting IPv6 abuses.
Despite the difficulties on defining anti-abuse, the WG considers that a
training activity about anti-abuse could be of great help.
Anti-abuse training
- Title: Anti-abuse for LIRs
- Target audience: Small new LIRs (mostly), but also all the other ones (eg.
old-big ones can share more with the new ones)
- Topic: How to report and handle abuse of your LIR resources (IPs and ASNs)
- Stakeholders: RIPE NCCâs LIRs (with special focus on very small LIRs that
doesnât know where and how to report abuse), targets of abuse, "facilitators"
of abuse, the ones that abuse, LIRs with resources in other RIRs
- Format: webinar (1-2 hrs) with trainers and interaction (questions and polls)
*In the future we can develop other reference materials for easy
sharing: BCOPs, RIPElabs articles, etc.
- Pedagogical approach: adult learning for professionals, where they will learn
actionable things that are useful for their daily job.
- Scope: We consider abuse and anti-abuse from the point of view of RIPE
NCCâs LIRs and related with Internet numeric resources (IPs and ASNs)
- Main Goals (from the participant point of view):
1) Explain the "abuse" context, and identify your place on it
2) Understand what is expected from you from the Internet community
Examples of questions to ask yourself: What led your network to abuse
others?, Am I attacking others currently?, How do I know?, Where should I check
my reputation?
3) Define a plan about what you, as an LIR, can do for others about
fighting abuse
Examples: maintain your anti-abuse contact info, report on abuse,
share info on abuse cases, collaborate with other stakeholders (LEAs, CERTs,
LIRs, RIPE Community), automate abuse handling/tools?
4) Understand what you can expect from other stakeholders related with
abuse fighting
Examples of stakeholders: LIRs/resources in all RIRs
5) Define a plan about what you, as an LIR, can do for yourself about
handling abuse
Examples: your reputation matters, what to do if you are the victim or
facilitator of abuse?, automate abuse handling/tools?, What are the
consequences of not handling abuses?
