POSTCOG: A Tool for Interdisciplinary Research into Underground Forums at Scale
Workshop on Attackers and Cyber Crime Operations
MetadataShow full item record
Pete, I., Hughes, J., Caines, A., Vu, A., Gupta, H., Hutchings, A., Anderson, R., & et al. POSTCOG: A Tool for Interdisciplinary Research into Underground Forums at Scale. Workshop on Attackers and Cyber Crime Operations. https://doi.org/10.17863/CAM.83768
Underground forums provide useful insights into cybercrime, where researchers analyse underlying economies, key actors, their discussions and interactions, as well as different types of cybercrime. This interdisciplinary topic of study incorporates expertise from diverse areas, including computer science, criminology, economics, psychology, and other social sciences. Historically, there were significant challenges around access to data, but there are now research datasets of millions of messages scraped from underground forums. The problems now stem from the size of these datasets and the technical nature of methods and tools available for data sampling and analysis at scale, which make data exploration difficult for non-technical users. POSTCOG has been developed to solve this problem. We first provide a survey of prior work into underground forums; this was used to understand the requirements and functionalities valued by researchers, and to inform the design of a data exploration tool. We then describe POSTCOG, a web application developed to support users from both technical and non-technical backgrounds in forum analyses, such as search, information extraction and cross-forum comparison. The prototype’s usability is then evalu- ated through two user studies with expert users of the CRIMEBB dataset. POSTCOG is made available for academic research upon signing an agreement with the Cambridge Cybercrime Centre.
This work was supported by the Economic and Social Research Council (ESRC) (grant number ES/T008466/1) and the European Research Council (ERC) under the European Union’s Horizon 2020 research and innovation programme (grant agreement No 949127).
European Commission Horizon 2020 (H2020) ERC (949127)
Embargo Lift Date
External DOI: https://doi.org/10.17863/CAM.83768
This record's URL: https://www.repository.cam.ac.uk/handle/1810/336348
All Rights Reserved
Licence URL: http://www.rioxx.net/licenses/all-rights-reserved