The World's Only Test Security Blog
Pull up a chair among Caveon's experts in psychometrics, psychology, data science, test security, law, education, and oh-so-many other fields and join in the conversation about all things test security.
Posted by Cary Straw
updated over a week ago
It will come as no surprise when I say that Braindump sites are among the biggest problems facing high-stakes testing programs today. (In fact, Braindumps are such a vast problem that we created an entire ultimate guide on finding and removing your test content online.) There are hundreds (if not thousands, internationally) of braindump sites disclosing actual exam content, with new sites being created daily. There is also a vast array of affiliated blogs, filesharing sites, social media posts, etc. that direct people back to their braindump content. And while it used to be sufficient to send a DMCA Takedown Notice (learn what that is here) to remove your test content from a braindump site, limited time and resources—in addition to the increasing number of braindump sites—makes this task more difficult than ever. However, with the right approach, sending a DMCA takedown notice is still an important and effective tool in the battle for test security.
It’s frustrating (and expensive!) for testing organizations to spend the time, creativity, and resources developing test items, only to have those items disclosed on the internet a short time after the test’s publication. The result is that undeserving test takers pass the exam by gaining pre-existing knowledge from the test content provided by these sites. Worse, this type of activity erodes the validity of your exam and hurts your program’s reputation. And worst of all, your investment in developing high-quality assessments is nullified. But you already know that. If you haven’t experienced the pain of finding your content exposed online yourself, you likely know a colleague that has.
While takedown notifications leveraging the Digital Millennium Copyright Act (DMCA) have been effective in the past, the sheer volume of potential sites today makes it difficult to address all of them with your limited time and resources. Additional challenges come from several sources. The fact today is that many braindump sites never respond to your takedown request, even after several attempts. Their contact information may also be protected from privacy protection services, making it challenging to discover who to address your takedown request to. In addition, if you do contact them, a braindump owner may make claims of “fair use,” knowing that the likelihood of you starting legal proceedings against them to prove otherwise is very small. Or they remove the material from one of their URLs, only to post it minutes later on several new sites.
So, what to do?
There are still cases when sending takedown notifications makes unequivocal sense. If the site is offering or selling your complete exam form or a substantial number of exact items, it is worth trying to get your content removed, and you are likely to have some success.
Here are some more tips for finding success with DMCA takedown notices:
You may say, “Don’t I have to have my items registered by copyright before I can send the DMCA notification?” Actually, not necessarily! Some level of implied copyright may likely cover your content because you authored the test questions. That said, we recommend that all high-stakes test programs register the copyright of their items and tests.
In consultation with legal counsel, draft appropriate DMCA language to be sent to offending websites.
Immediately after finding a braindump site with stolen test content, send a DMCA notification to the contact email on its webpage, the registered owner of the website, AND the host of the website.
If no response is received within 72 hours, send the DMCA notification again, and again… and perhaps one more time. The fourth time may be the charm. (Persistence pays off.)
By using this strategy of repeated DMCA notification delivery, you can still succeed in getting your content removed, at least some of the time. It is certainly worth it to put in the effort.
Beyond that, remember that—even if you can’t get your content removed—discovering which braindump sites (and how many) are hosting your content provides valuable information about your tests. This information can help you identify trends and provide critical insight into the useful lifespan of your items and forms. It will help you make decisions about whether you need to republish items, forms, or entire exams. Furthermore, it will allow you to conduct data forensics investigations to uncover which test takers utilized the braindump content, which in turn will enable you to pursue legal action if desired.
Also, to end on a positive note. Remember that even though there are a host of braindump URLs out there, most of them have very little activity or views. And while there are exceptions, very few of the sites index highly when your test takers perform a Google search (learn more about how search engines impact web monitoring in this article). This means they won’t show up in the first few pages of results that most online searchers check before moving onto something else.
In conclusion, you need not be overwhelmed by the sheer number of braindump sites or discouraged that DMCA notices are becoming less effective. Rather, view this as an opportunity to gain valuable insight into the health of your program and use the information you gather from braindump sites to guide your program forward. DMCA takedown notices aren’t the end-all solution they once were, but they are still a valuable tool in the fight against braindump sites, and well worth the effort to remove your test content from the internet.
Cary Straw is one of two Executive Web Patrol Managers at Caveon. He has been with Caveon for nearly fifteen years and has over thirty years of extensive experience in online computing, design, brand management, sales, and test security. Those varied strengths enable him to understand and know where the bad guys really hide online and how to find them.
View all articlesFor more than 18 years, Caveon Test Security has driven the discussion and practice of exam security in the testing industry. Today, as the recognized leader in the field, we have expanded our offerings to encompass innovative solutions and technologies that provide comprehensive protection: Solutions designed to detect, deter, and even prevent test fraud.
Topics from this blog: Braindumps Web Monitoring Detection Measures Deterrence Measures
Get expert knowledge delivered straight to your inbox, including exclusive access to industry publications and Caveon's subscriber-only resource, The Lockbox.