The reputation, risk, or likelihood of abuse of Internet infrastructure is an important factor in evaluating and prioritizing potential threats. In particular, certain nameservers, top-level domains (TLDs), domain registrars, and autonomous system numbers (ASNs) for routing IP traffic, are more likely to be leveraged by threat actors for a variety of reasons, including monetary, oversight, and political ones. Unfortunately, there is no standard method in the literature for creating or normalizing such scores, making it difficult to compare the results within a dataset, across data types, and across vendors.

Join for free to read