Evaluation of Anti-Abuse Strategies Among Hosting Providers

Abstract

Hosting providers are essential for maintaining the security and reliability of digital services, but they continue to face challenges from malicious activities in their network, such as malware and phishing. The European Union’s Digital Services Act (DSA) was introduced to improve accountability and create a safer online environment, but its effectiveness in helping hosting providers mitigate abuse remains unclear. This study investigates whether compliance with the DSA has contributed to reducing malicious activity among Dutch hosting providers and examines the broader relationship between compliance levels and cybersecurity outcomes.

This study evaluates the effectiveness of anti-abuse measures employed by Dutch hosting providers, with a focus on the role of the DSA in helping with compliance and reducing malicious activity. Specifically, it examines whether adherence to the DSA improves the ability of hosting providers to mitigate cyber threats, particularly in reducing the prevalence of malicious IP addresses. Using passive DNS data, the research examines changes in the prevalence of malicious IP addresses before and after the implementation of the DSA. Compliance levels were also analyzed to understand their correlation with malware percentages. The study employed statistical methods, including Interrupted Time Series (ITS) analysis and regression models, to evaluate trends and relationships between compliance and malicious activity.

The findings indicate no statistically significant reduction in malicious IP activity following the implementation of the DSA, suggesting that compliance alone does not automatically translate into improved security outcomes. While the DSA strengthens transparency and procedural accountability, hosting providers continue to face operational challenges in implementing effective anti-abuse measures. Factors such as cybercriminal adaptation, enforcement inconsistencies, and resource constraints likely influence the weak correlation between compliance and actual abuse reduction. These results shows the need for a more holistic approach to cybersecurity regulation, combining technical advancements, industry collaboration, and proactive security enforcement alongside regulatory compliance. Evaluating the effectiveness of frameworks like the DSA is essential to ensuring that they not only establish compliance standards but also provide hosting providers with practical tools to enhance online security and mitigate digital threats effectively.