Software Engineering Institute

This report is the latest in a series of works dedicated to documenting and exploring the blacklist ecosystem. Whereas previous full reports [1, 2, 3] were comprised partly of updates and partly of fresh analysis, we have decided to address those two goals in separate reports henceforth.  The update reports, of which this is the second, are dedicated strictly to updating the previously implemented methods with the latest data. For an incremental view of the accumulation of the results, see the previous update reports [4]. Separate full reports introduce novel analyses as they are developed, and when those novel analyses yield results that warrant continual updating, those analyses are added to the spectrum covered by the update reports. The update reports are planned for release in conjunction with every six months’ worth of data collection. This update covers the data collected from July 1, 2016, through December 31, 2016.