OECD anti-spam initiatives

OECD anti-spam initiatives Anti-SPAM Strategies – The Way Forward for the ASEAN Telecommunications Regulators’ Council (ATRC) 3-4 May 2005, Cyberjaya, Malaysia www.oecd.org/sti/spam claudia.sarrocco@oecd.org

Spam Over IP? Mobile phones Phishing Viruses Worms URLs Links to spam webs HTML Ascii Severity/Complexity 2006 2001 2005 Spam evolution Based on E. Salem (Symanthec) presentation (http://www.itu.int/osg/spu/spam/background.html)

Spam characteristics Fraudulent spam Spam – security threat Anonymous spam No prior consent

OECD Spam Task Force: Spam Toolkit • To provide member (and non-member) countries policy orientation and support in their decisions regarding spam issues (regulation, technologies, education…); • Promote/facilitate cross-border coordination among anti-spam authorities, and between public and private entities; • Raise awareness different stakeholders on the complexity and gravity of the issue, also providing informational and educative materials;

Spam Toolkit: content • Eight elements: • Regulation • Enforcement • Industry driven initiatives • Technical solutions • Education and awareness • Co-operative partnerships against spam • Spam metrics • Outreach

Element 1: regulation • Report on possible approaches to anti-spam regulation: • Basic principles • Cross-border provisions • Spam as a security threat • Sanctions • Players • Additional elements

Element 2: enforcement • Report on cross-border enforcement • Contact list (country profiles) • Possibility to extend the applicability of OECD cross-border guidelines on fraud to spam cases

Elements 3: Industry solutions • Activities undertaken by private sector entities to counter spam, such as for example ISPs and ISPs associations: • ISPA code of conduct • MAAWG initiative (www.maawg.org) • Etc. Element 4: Technical solutions • Study on technical solutions applicable to spam at different levels

Element 5: Education and awareness • Report on activities on education and awareness in OECD member countries (information and best practices) • Education and awareness website (in cooperation with ITU) for all interested countries Element 6: cooperative partnerships • Advantages and examples of cooperation between public and private entities in the spam sector

Element 7: spam metrics 2005-2005 - Messagelabs • Gathering of data and information from different sources, and elaboration of a sort of “basket” from which it will be possible to extrapolate a spam TREND 68.81% February-April 05 – Comendo (Dk)

Element 8: outreach activities • Spam is a global problem  the spam Toolkit is not directed only to OECD countries • Cooperation with ITU, APEC, etc, to ensure a larger diffusion of the toolkit and to include non-OECD economies in its elaboration • More attention to private-public dialogue • Report on spam in developing countries (public) • Contact list: open to all interested countries (see template) • OECD Spam Toolkit Website (www.oecd.org/sti/spam)

Spam authorities contact list CP=Consumer Protection Agency, Crim=Criminal prosecutor’s office and police; DP=Data Protection Agency, Sec=Securities and Investment Regulators. TC=Telecommunications authority. please fill it in and return to claudia.sarrocco@oecd.org

Thank you www.oecd.org/sti/spam

OECD anti-spam initiatives