The Japanese Experience Countering Spam ITU TELECOM WORLD 2006

Transcription

1 The Japanese Experience Countering Spam ITU TELECOM WORLD th December 2006 Shuji Sakuraba Copyright 2006

2 Present condition of spam in Japan - I 2004 Media Sent to mobiles 66 % Sent to PCs 34 % 2005 Sent to mobiles 23 % Sent to PCs 77 % Content of spam Advertisements for matchmaking (dating) sites 78 % Adult sites Others 9 13% % Adult sites Others Advertisements for matchmaking (dating) sites 90 % 6 % 4 % Source: Survey by Japan Computer Communications Association, Copyright

3 Present condition of spam in Japan - II Sent to PCs 2004 July-Dec Jan-June June Sent from Japan 28.6 % Sent to mobiles 23 % Sent from Japan 43.8 % Sent from abroad 56.2 % Sent from abroad 71.4 % Sent to Mobiles 2004 July-Dec Jan-June June Sent from Japan 99.3 % Sent from Japan 98.6 % Sent from abroad 0.7% Sent from abroad 1.4% Source: Survey by Japan Computer Communications Association, Copyright

4 History of spam in Japan 2001 Spam sent to mobiles significantly increased Self-regulation by mobile operators Administrative guidance by Government to implement new measures 2002 Two Laws enacted The Law on Regulation of Transmission of Specified Electronic Mail (Anti-spam Law) & Specified Commercial Transactions Law (For PC spam as well as Mobile spam) 2003 spread of Domain-Designation Service (to Block PC spam) Spam sent from mobiles increased Self-regulating (e.g. suspension of service for spammers) by mobile operators, Promotion of self-regulating by Government ( and decreased) 2004 spam (mainly sent from PCs to mobiles) is still a serious problem Anti-Spam Law stipulates that the Government has to consider whether it should be amended or not within three years of its enforcement ( by end of June 2005) MIC set up a Study Group on a framework to handle spam on Oct. 7, Revision of Anti-Spam Law Based on the Study Group s recommendations, an amendment bill to the Anti-Spam Law including the introduction of direct penalties was submitted to the Diet in March 2005, approved on May 15, and enforced on November 1, 2005 Copyright

5 Five points of MIC s anti-spam strategy 1. Legal enforcement by Government 2. Self-regulation by the private sector 3. Developing technologies 4. Enhancing awareness 5. Seeking international cooperation MIC: Ministry of Internal Affairs and Communications Copyright

6 Outline of The Law on Regulation of Transmission of Specified Electronic Mail (Anti-spam Law) Opt- out Transmission Transmission of of specified specified electronic electronic mail mail (unsolicited (unsolicited advertisement advertisement mail) mail) to to a a person person who who has has indicated indicated he/she he/she does does not not wish wish to to receive receive such such mail mail is is prohibited. prohibited. Labeling Labeling Labeling obligations obligations for for senders senders of of specified specified electronic electronic mail mail 1 Identified Identified as as specified specified electronic electronic mail(label mail(label 未 承 諾 広 告 ) ) 2 Sender s Sender s Name/address Name/address 3 Sender s Sender s Address Address 4 Opt-out Opt-out Address Address Penalties Administrative Administrative Order Order from from the the Minister Minister Fines Fines of of up up to to 500, ,000 yen yen ($4,200) ($4,200) assessed assessed can can be be imposed imposed if if the the Administrative Administrative Order Order is is not not followed. followed. Others Prohibition Prohibition of of mail mail transmission transmission utilizing utilizing any any program program that that generates generates random random fictitious fictitious e- e- mail mail addresses addresses Telecommunications Telecommunications carriers carriers are are authorized authorized not not to to provide provide transmission transmission services services if if the the s s include include random random fictitious fictitious addresses. addresses. Copyright

7 2005 Revision of the Anti-spam Law Introducing direct penalties for malicious spammers (*) Direct penalties for malicious spammers who disguise their information such as addresses are introduced where we had only a two-step punishment: the first is an administrative order by the Minister and the second is the imposition of a fine. Expanding the areas covered by the Anti-spam Law Adding to private-use addresses, s sent to business-use addresses are included Widening the scope of prohibited areas to fictitious address Adding to apparent advertisement s to fictitious addresses, blank s and s apparently from friends that are sent for advertisement are also banned. Widening the scope of legitimate refusal of service by ISPs The number of the cases ISPs could refuse mail services was limited, but it is widened where there are legitimate reasons such as causing a long jam of other s due to the extraordinary large amount of s sent. (*) We have 2 cases to which newly introduced direct penalties are applied. Copyright

8 Self-regulation by Private Sector - I Promotion of Self-regulation by Mobile Carriers MIC started to explore the countermeasures against spam together with mobile carriers in Nov.2005, and requested them to adopt uniform countermeasures. Suspension of service to spammers Mobile carriers NTT DoCoMo KDDI (au) Softbank Mobile Ceiling on the umber of s that can be sent from mobiles Mobile carriers NTT DoCoMo KDDI (au) Softbank Mobile Number of lines suspended 4,501 as of 30 September, ,000 as of 31 August, ,800 as of 5 July, 2006 Exchange of Information on Spammers Number of s that can be sent from mobiles Less than 200 s per line per day Less than 1,000 s per line per day Less than 120 s per line every three hours In order to stop spammers making contracts from one mobile carrier to another, it is important to exchange spammers information among mobile carriers to identify spammers quickly and utilize the information to screen new subscribers. MIC enacted this exchange scheme in Oct.2005 and it has been launched since Mar.2006 Copyright

9 Self-regulation by Private Sector - II Spam-Blocking Support Project MIC launched Spam-Blocking Project together with METI in Feb In this project, MIC confirms illegality of spam and providers information on illegal spam to ISPs. The ISPs can then easily shut out spammers via suspension based on their contracts. Japan Computer Communications Association ISPs spam spammer 5. Suspension Monitors 1. Analyzes headers of spam received by monitor terminals and detects ISPs that spammers used. 2. Report 4. Provide information on illegal spam Copyright 2006 MIC Confirm illegality 9

10 Self-regulation by Private Sector - III 800 Trend in amount of spam sent from mobiles Remarkably decreased due to the cooperation of mobile carriers and Government Jul May Jun Aug Sep Oct Nov Dec Jan Feb Mar Jul Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Copyright 2006 Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Source: Survey by Japan Computer Communications Association (Sample based survey using monitoring terminals) Aug Sep 10

11 Development of Technologies for Anti-spam Effective Technologies for Anti-spam Filtering Services Sender Authentication Technology Port 25 Blocking Legal Matters concerning these technologies Telecommunications Business Law stipulates: Secrecy of Communications Prohibition of Unfair Discrimination in Providing Telecommunications Business Whether these technologies run counter to the Law? MIC s s Actions Clarification of the legality of these technologies Promotion of these technologies Copyright

12 JEAG Recommendations Outbound Port 25 Blocking JEAG recommends that ISPs introduce Outbound Port 25 Blocking by March Authentication Technology JEAG recommends that ISPs introduce sender authentication technology at the sender side, specifically declaration of their authentication information (SPF recode or DKIM related information) on the domain name server. Mobile JEAG recommends that mobile operators and ISPs introduce some effective anti-spam measures such as mobile filtering service, suspension of usage for spammers, and a limit placed on the number of s that can be sent in a certain period. JEAG: Japan Anti-Abuse Group JEAG recommendations published on Feb. 23, 2006 Copyright

13 OP25B effectives Spammers move to another ISPs Spammers are looking for a whole of OP25B Spam from overseas are increasing Copyright

14 Seeking International Cooperation International cooperation is is necessary to to combat spam, a borderless problem. Multilateral LAP (London Action Plan) ITU (WSIS, workshops, etc.), APEC, OECD Seoul-Melbourne Multilateral MOU (first step to international cooperation on spam) Bilateral MIC holds several bilateral meetings with UK, EU, France, Germany, Italy, Canada, Australia, etc. MIC signed Joint Statements with France (May 2006), UK (September 2006), and Canada (October 2006) Copyright