10 Years On, ICANN Seeks Governance Evolution to Counter AI-Driven DNS Risks

ICANN Chair Tripti Sinha stated that the organization must accelerate its governance processes to keep pace with artificial intelligence and geopolitical risks. She made these remarks during the opening ceremony of the annual conference in Bali, Indonesia, noting that the multi-stakeholder model has remained credible since the US government handed over IANA functions more than ten years ago.

Sinha emphasized that while the DNS has not fragmented, the organization must examine its accountability mechanisms to remain effective. She highlighted that AI could create new challenges for managing internet resources, potentially reshaping DNS traffic patterns and increasing demand on systems that enable discovery and trust online.

Governance evolution

The chair observed that the strongest sign of success over the past decade is that the internet continues to work without destabilization. However, she argued that the organization must evolve to ensure this success continues. ICANN commenced a “review of reviews” last year, which Sinha said reflects a willingness to examine its own operations and enhance accountability mechanisms where necessary.

Emerging threats

Sinha warned that AI agents could intensify demand on systems enabling authentication and trust. She noted that artificial intelligence could both create more malicious DNS registrations and help defend against them. The organization aims to anticipate change without rushing ahead of evidence, seeking to deliver governance capable of adapting to the speed of emerging risk while innovating without compromising trust.

Defender's checklist

Organizations should monitor ICANN’s policy updates for changes in domain registration rules or security standards. Security teams should review their DNS monitoring tools to ensure they can detect unusual traffic patterns that may indicate AI-driven abuse. IT leaders should assess their current authentication systems to verify they can handle increased demand from automated agents.

Operational impact

Leadership should ask whether current DNS monitoring tools can distinguish between legitimate AI-driven traffic and malicious activity. Teams usually need to verify that their authentication infrastructure can scale during sudden demand spikes caused by automated agents. Check whether vendor contracts include clauses for rapid response to new governance mandates. Ensure that legal and compliance teams are aware of potential shifts in multi-stakeholder accountability requirements.

Background: AI agents

An AI agent is a software system that perceives its environment, makes decisions, and takes actions to achieve specific goals without constant human input. Unlike passive tools, agents execute tasks, browse data, and interact with other systems autonomously.

Read the full guide: AI Agents Defined: Autonomy, Risk, and Real-World Use

What to do and how to stay safe: ICANN

• Review DNS logging configurations to ensure they capture sufficient detail for analyzing automated traffic patterns.
• Assess the resilience of authentication systems against high-volume requests from AI agents or bots.
• Monitor official ICANN announcements for updates on governance reviews that may affect domain management policies.
• Verify that incident response plans include procedures for handling large-scale DNS anomalies or registration abuses.

Step-by-step guide: Implementing AI Usage Policies at Work: A Step-by-Step Framework

General security guidance from the InfoSec Ledger newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Why is ICANN focusing on AI and geopolitics now?

Chair Tripti Sinha stated that AI could reshape DNS traffic and create new challenges for managing internet resources, requiring faster governance adaptation.

What did ICANN achieve in the last decade?

The organization maintained multi-stakeholder governance, prevented DNS fragmentation, and kept the coordination of unique identifiers stable since the IANA handover.

How might AI affect DNS systems?

AI agents could intensify demand on discovery and authentication systems, potentially creating more malicious registrations while also aiding defense efforts.