Security and Stability Advisory Committee (SSAC)

The SSAC is a volunteer group of specialists in the technical security field that provides advice and insight to the ICANN community and the Board.

SSAC Publications

The SSAC produces reports, correspondence, and comments on a range of topics. The SSAC undertakes ongoing risk analysis to identify a prioritized list of topics for SSAC work. However, the ICANN Board, Advisory Committees (ACs), Supporting Organizations (SOs) or other bodies within ICANN may request that the SSAC review, comment, or give feedback on a specific topic or issue at any time.

Reports are focused on providing information, recommendations, and advice on technical security, stability, and resiliency (SSR) issues to the ICANN Board, the ICANN community, and the broader internet community. They may investigate emerging or long-term issues or could be published in response to a security event or incident, where timely notification to the community is a priority concern. They may be informational without any findings or recommendations or they could contain specific recommendations for the ICANN Board or community, and if appropriate, organized according to the groups to which they are most applicable.

Correspondence comprises letters, comments, and other documents on administrative, community, and other non-SSR issues and are normally signed by the SSAC Chair. They may take the form of a letter or a response submitted to a public comment forum. They may present recommendations regarding the issue.

Comments are prepared in response to explicit questions posed to or requests made to the SSAC, or as a response to ICANN’s public comment forum. Comments may be brief or long, depending on the issue and the extent to which the SSAC studies it.

A goal of the SSAC is to ensure that its work results in specific actions whenever possible. In order to measure progress towards this goal, the SSAC tracks any effects of each recommendation. For documents that contain recommendations for the ICANN Board, the Board Action Request Register (ARR) captures the information required to understand the status of advice and tracks it from when it is given through implementation.

Advanced Search
Select filter and click Apply to narrow your search results or click More Search Options to search for keywords within SSAC Publications.

Report on Domain Name Front Running (English) (pdf, 172.83 KB)SAC 024 SAC 024 Registration ServicesReport
25 Feb 2008
25 Feb 2008
SSAC Comment to GNSO regarding WHOIS studies (English) (pdf, 29.32 KB)SAC 027 SAC 027 WHOISComment
7 Feb 2008
7 Feb 2008
SSAC Advisory on Fast Flux Hosting and DNS

Additional Documents:
Executive Summary (English)

SAC 025 SAC 025 Domain Name System (DNS) AbuseReport
28 Jan 2008
28 Jan 2008
SSAC Statement to ICANN and Community on Deployment of DNSSEC (English) (pdf, 26 KB)SAC 026 SAC 026 Registration ServicesAdvisory
28 Jan 2008
28 Jan 2008
Is the WHOIS Service a Source for email Addresses for Spammers? (English) (pdf, 959.69 KB)

Additional Documents:
Executive Summary (English)

SAC 023 SAC 023 WHOISReport
23 Oct 2007
23 Oct 2007
SSAC Advisory on Domain Name Front Running (English) (pdf, 196.87 KB)

Additional Documents:
Executive Summary (English)

SAC 022 SAC 022 Registration ServicesAdvisory
20 Oct 2007
20 Oct 2007
Survey of IPv6 Support in Commercial Firewalls (English) (pdf, 235.48 KB)SAC 021 SAC 021 AddressingReport
5 Oct 2007
5 Oct 2007
SSAC Response to IDN Program Director regarding ICANN's proposal for IDN deployment at the root level of the DNS (English) (pdf, 72.69 KB)SAC 020 SAC 020 Internationalized Domain Name (IDN)Comment
23 Jul 2007
23 Jul 2007
SSAC Response to Comment Sought on DNS Root Zone Glue Policy (English) (pdf, 70.51 KB)SAC 019 SAC 019 Root SystemComment
16 Mar 2007
16 Mar 2007
Testing Recursive Name Servers for IPv6 and EDNS0 Support (English)SAC 017 SAC 017 Root SystemReport
8 Feb 2007
8 Feb 2007
Testing Firewalls for IPv6 and EDNS0 Support (English)SAC 016 SAC 016 Root SystemReport
30 Jan 2007
30 Jan 2007
Accommodating IP Version 6 Address Resource Records for the Root of the Domain Name System (English) (pdf, 412.21 KB)

Additional Documents:
Executive Summary (English)

SAC 018 SAC 018 Root SystemReport
26 Jan 2007
26 Jan 2007
Why Top Level Domains Should Not Use Wildcard Resource Records (English)SAC 015 SAC 015 Domain Name System (DNS) AbuseReport
10 Nov 2006
10 Nov 2006
Information Gathering Using Domain Name Registration Records (English) (pdf, 166.36 KB)SAC 014 SAC 014 WHOISReport
28 Sep 2006
28 Sep 2006
SSAC Response to ICANN Letter re: Tralliance Proposed New Registry Service (English)SAC 013 SAC 013 Domain Name System (DNS) AbuseComment
6 Sep 2006
6 Sep 2006
SSAC Comments to the ICANN Board of Directors on Proposed Global Policy for Allocation of IPv6 Address Space (English) (pdf, 103.69 KB)SAC 012 SAC 012 AddressingComment
11 Aug 2006
11 Aug 2006
Problems caused by the non-renewal of a domain name associated with a DNS Name Server (English) (pdf, 196.81 KB)SAC 011 SAC 011 Registration ServicesReport
7 Jul 2006
7 Jul 2006
Renewal Considerations for Domain Name RegistrantsSAC 010 SAC 010 Registration ServicesReport
29 Jun 2006
29 Jun 2006
Alternative TLD Name Systems and Roots: Conflict, Control and Consequences (English) (pdf, 283.48 KB)SAC 009 SAC 009 Root SystemReport
31 Mar 2006
31 Mar 2006
DNS Distributed Denial of Service (DDoS) Attacks (English) (pdf, 962.89 KB)SAC 008 SAC 008 Domain Name System (DNS) AbuseReport
31 Mar 2006
31 Mar 2006