|
||||
 |
|
|
|
|
Anti-Spam Efforts in Brazil |
Educational Videos
See also
the Antispam.br
Educational Videos available in English.
The four stories -- Navigating is necessary, The Invaders, Spam and Defense -- explain in a fun way what you can do in the Internet, what are the risks associated with malware, what is spam, and how to improve security online. Summary
Internet Governance ContextFighting spam has been a topic debated on Internet Governance related forums in the past 15 years. The reasons for this topic being present on discussions for so long are as diverse as the ways we can research the topic. The efforts to stop spam can be approached from technological, legal, political and social aspects. In Brazil the strategies to fight spam are the result of a coordination effort by the Brazilian Internet Steering Committee (CGI.br) Anti-Spam Task Force (CT-Spam). This effort involved bringing into the discussion of possible solutions dozens of Telecommunications Companies, thousands of Internet Service Providers, Consumer Protection organizations, representatives from the Civil Society and the Academia, as well as the technical staff of NIC.br/CGI.br. The success of this initiative points to the fact that a multi-stakeholder collaboration is the best strategy to effectively implement security policies, deal with cybersecurity related issues and establish trust on the Internet. A Brief HistoryThe CT-Spam was created in 2005, as one of the CGI.br initiatives, with the objective to deal with the obvious problems that spam was causing to the Internet in Brazil and abroad. This effort was proposed and Coordinated by the CGI.br Board Member Henrique Faulhaber. Since its inception the CT-Spam is working with actors from different sectors to raise awareness about their roles and the importance of implementing anti-spam policies and technologies. At the same time it was working to provide awareness and education to end users about safety and security on the Internet. Different Approaches to Different ProblemsAfter several studies conducted by CERT.br it was clear that the major spam problem in Brazil was the abuse of the country's broadband infrastructure by international spammers, usually abusing open proxies or through botnets, both in end user infected computers. The impacts of inaction were already being noticed by consumers and access providers, specially:
Nevertheless, there were also other issues to be dealt with, specially:
As the result of the multi-stakeholder discussions the CT-Spam worked to implement different policies and technologies for the different aspects of the spam problem. Among these activities the main areas of work were: Antispam.br WebsiteA Web Portal was created with information for end users, e-mail and connectivity providers. For end users the information is focused on explaining what is spam, the risks of malware and fraud and how to avoid these risks. This information is presented also in four videos. For the e-mail and connectivity providers the focus is on several anti-spam techniques, including DKIM, SPF, Greylisting and Port 25 Management. Port 25 ManagementTo prevent broadband infected computers to perform direct delivery of spam our studies showed that the most effective countermeasure would be to implement Port 25 Management. This is the term used to refer to the policies and technologies implemented in residential or dynamic IP address spaces to enforce the separation between message submission and message transport. This measure was formally recommended by CGI.br in its Resolution "CGI.br/RES/2009/02/P". This recommendation led to two other important documents: a formal statement from the Consumer Protection Department of the Ministry of Justice, analyzing the consequences do consumers and recommending its adoption; and the Cooperation Agreement, signed by CGI.br, Anatel, the Telecommunication Companies Union and the ISPs Associations, with the details of the implementation process. The implementation of this technique alone was responsible for taking Brazil out of almost all existing lists of "Top Countries" originating spam. Anti-Spam LegislationAnti-Spam Legislation - CT-Spam promoted a legal study of all international anti-spam laws, as well as all the laws being proposed in the Brazilian Congress. At the end of this study a new text for a legislation was proposed, based on the opt-in principle. This text is the base of the current anti-spam bill being currently considered in the Congress. E-mail Marketing Self-Regulation CodeThis initiative arose from the perception that more than working on new legislation, there was a need to establish standards and best practices to guide e-mail marketing companies. This Code details how to send e-mail marketing respecting opt-in principles, e-mail reputation best practices and data privacy and protection related to e-mail address lists Resources in EnglishA Multistakeholder Effort to Reduce Spam --
The Case of Brazil Port 25 Management in Brazil: A
Multistakeholder Effort to Reduce Direct Delivery from End User
Networks Port 25 Management in Brazil: A
Multistakeholder Effort to Reduce Direct Delivery from End User
Networks Port 25 Management in Brazil or how Brazil left
the CBL Top 10 Port 25 Management in Brazil: Overview and
Results CGI.BR: Brazil no longer in the list of top
10 countries that send the most spam in the world |
