SSAC review of Plan for Enhancing Internet Security, Stability, and Resiliency

[James M Galvin <galvin@xxxxxxxxxx>]

The ICANN Security and Stability Advisory Committee (SSAC) applauds
the initiative taken by ICANN to develop a "Plan for Enhancing
Internet Security, Stability, and Resiliency" (SSR).  After
significant review and interaction with the ICANN Chief Internet
Security Advisor SSAC does have a few additional recommendations
that we believe should be included in the plan.

1. Section 3.3 broadly states that ICANN will not act against
malicious actors.  SSAC recommends that an exemption be included
stating that ICANN will act to combat criminal behavior and engage
malicious actors when they are directed against ICANN's operational
resources.

2. Section 5.2.4 describes ICANN's ongoing programs related to
Whois.  SSAC recommends that ICANN consider what it should do about
the privacy and security concerns of Whois information.

3. SSAC recommends that Section 5.2.10.1 include a reference to
SAC004 "Securing the Edge."

4. SSAC recommends that Section 5.3 should also reference the RIRs
responsibility for ASN assignments and should seek to partner with
the RIRs to enhance the security of those assignments.

SSAC encourages ICANN to routinely assess its SSR plan to assure
that it continues to operate within the remit and scope dictated by
its mission statement.

Submitted on behalf of SSAC by Jim Galvin
SSAC Executive Director