1

OECD anti-spam initiativesAnti-SPAM Strategies – The Way Forward

for the ASEAN Telecommunications Regulators’ Council (ATRC)

3-4 May 2005, Cyberjaya, Malaysia

www.oecd.org/sti/spam claudia.sarrocco@oecd.org

2

Spam evolution

Mobile phones

Spam Over IP?

2005

PhishingVirusesWorms

Ascii

URLs Links to

spamwebs

HTML

2001

BagleNetsky

MyDoom

Severity/Complexity

2006

Printer inkOffer shippingvi@gra

Based on E. Salem (Symanthec) presentation (http://www.itu.int/osg/spu/spam/background.html)

3

Spam characteristics

Fraudulent spam

Spam – security threat

Anonymous spam 

No prior consent

4

OECD Spam Task Force: Spam Toolkit

To provide member (and non-member) countries policy orientation and support in their decisions regarding spam issues (regulation, technologies, education…);

Promote/facilitate cross-border coordination among anti-spam authorities, and between public and private entities;

Raise awareness different stakeholders on the complexity and gravity of the issue, also providing informational and educative materials;

5

Spam Toolkit: content

Eight elements:

– Regulation– Enforcement– Industry driven initiatives– Technical solutions– Education and awareness– Co-operative partnerships against spam– Spam metrics– Outreach

6

Element 1: regulation

Report on possible approaches to anti-spam regulation:

– Basic principles– Cross-border provisions– Spam as a security threat – Sanctions– Players– Additional elements

7

Element 2: enforcement

Report on cross-border enforcement

Contact list (country profiles)

Possibility to extend the applicability of OECD cross-border guidelines on fraud to spam cases

8

Elements 3: Industry solutions

Activities undertaken by private sector entities to counter spam, such as for example ISPs and ISPs associations:

– ISPA code of conduct– MAAWG initiative (www.maawg.org)– Etc.

Element 4: Technical solutions Study on technical solutions applicable to spam at different levels

9

Element 5: Education and awareness

Report on activities on education and awareness in OECD member countries (information and best practices)

Education and awareness website (in cooperation with ITU) for all interested countries

Element 6: cooperative partnerships

Advantages and examples of cooperation between public and private entities in the spam sector

10

Element 7: spam metrics

Gathering of data and information from different sources, and elaboration of a sort of “basket” from which it will be possible to extrapolate a spam TREND

74

76

78

80

82

84

86

88

90

Apr-05 Apr-05 Mar-05 Mar-05 Feb-05

February-April 05 – Comendo (Dk)

2005-2005 - Messagelabs

68.81%

11

Element 8: outreach activities

Spam is a global problem the spam Toolkit is not directed only to OECD countries

– Cooperation with ITU, APEC, etc, to ensure a larger diffusion of the toolkit and to include non-OECD economies in its elaboration

– More attention to private-public dialogue

– Report on spam in developing countries (public)

– Contact list: open to all interested countries (see template)

– OECD Spam Toolkit Website (www.oecd.org/sti/spam)

12

[formal or informal instruments for cooperation in the field of spam]

AVAILABLE MEANS OF CO-OPERATION

[administrative/criminal/civil; monetary/non-monetary; amount]

Available sanctions:

[name of the law ; website of reference]Other law(s) applicable to spam: [for

example data privacy or consumer protection laws]

[name of the law ; website of reference]Spam specific law?

RELEVANT NATIONAL ANTI-SPAM LAWS

[name of the authority, contact details, name of the person/office to be contacted, email and/or phone number]

CONTACT POINTS

[kind ofauthority*]

[URL] in case more than one – [name of the authority]

[kind ofauthority*]

[URL] [name of the authority]

AUTORITY DEALING WITH SPAM ISSUES

Spam enforcement country profileLast updated: [date]

Country [add name]

[formal or informal instruments for cooperation in the field of spam]

AVAILABLE MEANS OF CO-OPERATION

[administrative/criminal/civil; monetary/non-monetary; amount]

Available sanctions:

[name of the law ; website of reference]Other law(s) applicable to spam: [for

example data privacy or consumer protection laws]

[name of the law ; website of reference]Spam specific law?

RELEVANT NATIONAL ANTI-SPAM LAWS

[name of the authority, contact details, name of the person/office to be contacted, email and/or phone number]

CONTACT POINTS

[kind ofauthority*]

[URL] in case more than one – [name of the authority]

[kind ofauthority*]

[URL] [name of the authority]

AUTORITY DEALING WITH SPAM ISSUES

Spam enforcement country profileLast updated: [date]

Country [add name]

Spam authorities contact list

CP=Consumer Protection Agency, Crim=Criminal prosecutor’s office and police; DP=Data Protection Agency, Sec=Securities and Investment Regulators. TC=Telecommunications authority.

please fill it in and return to claudia.sarrocco@oecd.org

13

Thank you

www.oecd.org/sti/spam