[gnso-ff-pdp-may08] Mannheim formula reference

[Marika Konings <marika.konings@xxxxxxxxx>]

Dear All,

As discussed on our call yesterday, please find below the original proposal 
regarding the inclusion of the Mannheim formula in the report. At that time, 
the proposed text was not accepted. Joe, as you provided the original text, and 
Rod, as you proposed to include a reference in the final report, could you 
maybe work together on a new text and proposed place in the document and 
circulate it to the group for consideration? Greg provided a link to the paper 
in an earlier email ( 
http://pi1.informatik.uni-mannheim.de/filepool/research/publications/fast-flux-ndss08.pdf),
 so maybe he is interested in participating in this effort too?

Thanks,

Marika

==============

The majority of members of the working group believe that the Mannheim fast 
flux score formula would provide a robust and mechanically applicable 
definition of "fast flux" which would minimize false positives, and believe 
that the use of whitelisting plus manual review can eliminate any remaining 
potential false positives.

The working group received multiple offers of fast flux-related data from 
<insert list of fastflux data sources here [I'm aware of at least two or three, 
but I'll defer to the data collection subcommittee for a definitive list]>. The 
working group accepted [or rejected] data from those sources, and [did what 
with it?], finding [what?]. Those interested in working with that data can 
apply to obtain access to it by contacting [who?]

While it may not be possible to definitively distinguish the costs of 
cybercrime associated with fast flux from the costs of cybercrime conducted 
separate from fast flux, the working group did receive reports on aggregate 
estimates of cybercrime-related costs, and even if a fraction of 1% of all 
cybercrime can be tied to fast flux, the costs would be staggering. Moreover, 
at least in some cases such as the use of fast flux to distribute child 
pornography, there are substantial non-financial human costs which should also 
be recognized.