Rakuten Technology Conference 2019

1. Nov 9, 2019
Kenji Kitaura
Channel Solution Section
Data Science & AI Department
Rakuten, Inc.

2. 2








3. 3

4. 4
Spoofing emails were sent which can’t be distinguished from fake and real.

5. 5
Spoofing emails were sent which can’t be distinguished from fake and real.
[【ご注意ください】楽天カードを装った不審なメール(カード利用お知らせメール) ・ https://ichiba.faq.rakuten.net/detail/000007165・2019/10/29]
Highlight links to suspicious files

6. 6
 Damage brand image
 Refrain from using services because of anxiety


7. 7
Ratio of email to Global Email Box Provider(EBP) such as @gmail.com has
doubled in 6 years. Major EBPs are actively using sender authentication. They
have been involved in it since the specification discussion.

8. 8

9. 9
TYPE OF EMAIL




Sender


Email Platform



…
Rakuten sending various type of email from many platform. Managing all email is
very difficult.

10. 10

11. 11



7.2%
p=reject (Domain) Email sent by p=reject
56%
※ As of 2019/10/29
100%
DMARC adaption

12. 12
In the second half of last year, we focused on DKIM adaption. DMARC pass by SPF.

13. 13

14. 14
All domain reports are collected and analyzed in one system.
Domain owners are able to see the detail DMARC, DKIM and SPF success rate for
each platform.

15. 15
Publish initial record with p=none
Collect and analyze DMARC report
DKIM & SPF implementation
Policy ramp-up decision
Initial Auditing Phase
Policy Ramp-up Phase
Ongoing monitoring Phase
p=reject(quarantine and pct are option)
Realtime email open rate monitoring in 2 days after changing
Verify DMARC report
Confirm Number of inquiries to call center
DMARC success rate in sending platform
Find unknown platform and check DMARC success rate
Steps for introducing DMARC. At Rakuten, the goal is basically p=reject.

16. 16

17. 17
Since it is necessary to implement with many services, we asked for top-down and
invited the operators to briefing session.
CISO
CxO
(Executives)
Service
Director
Operator
Service
Tech
External tool
Vendors
Project
Team
Technical Assistant
Guidance/Manual
Seminar/Consultation
Describe directly

18. 18

19. 19
There were occasional large phishing campaigns. There is always a certain amount
of unauthorized emails in normal times.
Rakuten Card p=reject 100% Other Major Domains p=reject 100%

20. 20
An analysis of the DMARC report revealed email statistics.





21. 21
The number of phone calls regarding phishing has temporarily decreased by about
50% since the adaptation of DMARC with p=reject.
DMARC p=reject implemented on 2017/11
Reject rate against unauthorized email

22. 22

23. 23
Yahoo! Mail is one of the most popular email services for
customers in Japan. Last year, Yahoo! Japan and Rakuten
began displaying brand images using DKIM as a measure
against spoofing emails.
[楽天サービスに対する不正対策・https://corp.rakuten.co.jp/security/anti-fraud/・2019/10/29]
Brand Symbol

24. 24


Rakuten is actively working to improve email security as a large email sender. As
part of that activity, I participate in major conferences in this field.

25. 25
Meet our Recruiting team for more details