CyberDefcon has released a new white paper, The New gTLDs – Security by Design, focused on the security of New gTLDs. The paper, with contributions from HostExploit members, welcomes the new gTLD program as an important step towards improved “security by design”.

The New gTLDs (generic top-level domains), due for roll-out in 2013, will provide the Internet with its largest ever transformation. Security issues with previous and current gTLDs remind us that such an expansion has the potential to open avenues to greater cybercriminal activity.

However, ICANN’s rigorous new gTLD application process provides a fresh approach towards security with new gTLDs providing a more stable and secure domain environment. The application process is born from multi-sector discussion and community engagement with ICANN in recent years.

A number of mandatory Registry requirements are key to ICANN’s new application process, such as the use of DNSSEC at zone level, IPv6 support and standardized “thick” WHOIS. Trademark protection processes – namely the Trademark Clearinghouse and the Uniform Rapid Suspension system – also help alleviate concerns of increased potential for cybersquatting.

The paper states:

“The rollout of the new gTLDs provides the opportunity for consensus on the approach to [the security] challenge and much-needed standardization of procedures across the industry. The result will be a trusted environment with minimal risk associated, which in itself will create the potential for real growth.”

While the aim of the new gTLD program is, essentially, to increase diversity and competition in the domain market, it also presents an opportunity for Registries and Registrars to reduce the cost of domain abuse, and in doing so drive new business.

A good example can be seen in HostExploit’s collaboration with Demand Media. Previously identified by HostExploit as a home to badware and botnets, Demand Media has since introduced a number of proactive measures that have considerably cleaned up their customers’ accounts. The result is cleaner systems and greater trust from the community approaching the launch of the new gTLDs.

The white paper includes recommendations for existing and potential Registries, Registrars and Registrants, as well as a Best Practices guide. Also discussed are future innovations and the next steps for the domain community.

Security for the new gTLDs is an important subject and we value any comments you may have on this white paper. You can download the paper and contribute to the discussion at newgltdsecurity.com.