Skip to main content
Resources

域名滥用活动报告

本页面还提供其他语种：

ICANN 域名滥用活动报告 (Domain Abuse Activity Reporting, DAAR) 项目是用于研究和报告顶级域 (TLD) 注册管理机构域名注册和安全威胁（域名滥用1）的系统。DAAR 的首要宗旨是开创稳健、可靠而又可复制的安全威胁活动分析方法，以便 ICANN 社群据此做出明智的政策决定。

该系统可收集 TLD 根区数据，同时运用大量高置信信誉拦截列表 (RBL) 安全威胁数据源对这些数据集进行补充。这些数据源由第三方提供商和域提供。每个数据源采用的汇编方法各不相同，如集体外包、垃圾邮件过滤器和蜜罐等。数据源从过去识别的网络钓鱼、恶意软件、垃圾邮件和僵尸网络命令与控制安全威胁汇聚而来。请注意，除少量 RBL 本身包含标签的数据源以外，DAAR 系统及其他数据源均未对恶意注册域名与遭到攻击的域名做出明确区分。

DAAR 系统收集的汇总统计数据和匿名数据可以作为各注册管理机构研究及报告每日或历史注册数据或滥用活动的基础。目前使用 ICANN《服务水平协议》监控 (SLAM) 系统将相关汇总数据发送给注册管理机构。注册管理运行机构可以使用 ICANN 监督系统应用程序编程接口 (MoSAPI) 检索 SLAM 系统收集的信息。

从 DAAR 系统中收集的数据将用于生成 DAAR 月度报告。报告将针对提供数据的所有 TLD 执行月度分析（一整月的合计中位数）。同时，还可以针对 DAAR 关注的安全威胁（即网络钓鱼、恶意软件、垃圾邮件及僵尸网络命令与控制）进行汇总统计和时序分析。

请注意，DAAR 数据既不是为了提供安全威胁缓解信息，也不负责保证 TLD 能够快速可靠地缓解安全威胁。DAAR 是为了向用户展示安全威胁集中爆发的 TLD 空间区域以及集中区域的变化趋势。

本网页提供了 DAAR 月度报告链接及另外一些 DAAR 相关文件，如下所示：

  • DAAR 月度报告
  • DAAR 背景文件，概括介绍月度报告背景信息，总结 DAAR 依据的方法
  • DAAR 方法论文，详细解读如何收集 DAAR 数据以及如何定义衡量标准
  • 两项 DAAR 方法论文独立审核建议
  • 一系列匿名及署名文件，包含针对 DAAR 审核收集的公众意见
  • 首席技术官办公室安全、稳定与弹性小组 (OCTO-SSR) 针对公众意见做出的回复

域名滥用活动报告 (DAAR) 中的国家和地区顶级域

域名滥用活动报告常见问题与解答

[以下报告仅提供英文版本]。

域名滥用活动 (DAAR) 月度报告

背景文件：了解 DAAR 月度报告 [PDF, 72 KB]

2021

2020

2019

2018

其他资源

1 在更新术语中，DAAR 将酌情使用术语"安全威胁"表示"滥用"

A note about our terms of service:

We have updated our electronic terms of service to provide greater transparency and align with laws applicable to us. Learn more.

This site uses cookies to deliver an efficient user experience and to help us see how the site is used. Learn more.OK

Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as""icann.org"" is not an IDN."