we've seen a dramatic increase in malvertising. it's appropriate we're talking about it and i agree with what senator johnson has said that internet has thrived without the heavy-handed government and we want to make sure that continues, critical to our economy. earlier we talked about a lot of solutions, and i don't understand enough about the problem to understand the solutions to be frank. but rarification standards seems to make sense. you talk about information sharing protocols and talk about liability protections needed to make that work well. i know you aren't lawyers but we'd like more information on that, if you can give it to us for the record. the ad networks themselves, accountable measures makes a lot of sense. we talk some about enforcement and we'll ask about that in a second. enforcement requires the information, which is important to get at what you talked about in terms of the financial incentives in the system now. i have a question to kind of backup so i understand this problem better. mr. salem, you're with go

so how does malvertising occur? go to exhibit b. thank you. the most common tactic is a cyber criminal are going directly to an ad network, selecting the target audience and paying for an ad campaign. in the absence of reputation checks or threat reporting once detected and shut down by one network the cyber criminal waterfalls or goes to another network to repeat the exploit over and over. on the left you see the different tactics of how it is inserted and, again, it is important to note in this diagram the consumers are bearing the brunt of it. also quality brands and websites, their images are being tarnished as well. the impact on the threats are increasing significantly. criminals are becoming experts in targeting and timing, taking advantage of the powerful tools and data available to internet advertisers. they have become what's known as data driven marketers with precision to reach vulnerable segments of the society as well as high net worth target audiences. they have been able to choose day and time of the exploits and the type of de