Software Engineering Institute

This report is the latest in a series of works dedicated to documenting and exploring the blacklist ecosystem. Whereas previous individual reports [1, 2, 3] were comprised partly of updates and partly of fresh analysis, we have decided to address those two goals in separate reports henceforth. The update reports, of which this is the first, will be dedicated strictly to updating the previously implemented methods with the latest data. Separate reports will introduce novel analyses as they are developed. Updates of the present sort are planned for release in conjunction with every six months’ worth of data collection. This update covers the data collected from January 1, 2016, through June 30, 2016.

Because the aim of the semi-annual updates is the efficient communication of the latest data, and because all of the methods implemented in this report remain identical to the methods employed in previous reports, we have omitted the “Method” section that appeared in the previous full reports. In lieu of that section, for each analysis type, we direct the reader to the previous reports, which contain the full method for each analysis type. The references, too, are restricted merely to citations to the previous full reports. Full details of relevant literature for each of the analysis methods can be found within the previous full reports.

Additionally, in order to facilitate consistent treatment of the data, we have reprocessed the data from the first three annual reports into uniform 6-month sets for the results presented in the Persistence in Blacklists analysis (Section 2.5).

http://resources.sei.cmu.edu/library/asset-view.cfm?assetid=83438.

http://resources.sei.cmu.edu/library/asset-view.cfm?assetid=428609

http://resources.sei.cmu.edu/library/asset-view.cfm?assetid=448123