Repository logo
 

Characterizing eve: Analysing cybercrime actors in a large underground forum

Simple item page
cam.issuedOnline2018-09-07
dc.contributor.authorPastrana, S
dc.contributor.authorHutchings, A
dc.contributor.authorCaines, A
dc.contributor.authorButtery, P
dc.contributor.orcidPastrana, S [0000-0003-1036-6359]
dc.contributor.orcidHutchings, A [0000-0003-3037-2684]
dc.contributor.orcidCaines, A [0000-0001-9647-4902]
dc.date.accessioned2018-10-31T06:51:15Z
dc.date.available2018-10-31T06:51:15Z
dc.date.issued2018
dc.description.abstractUnderground forums contain many thousands of active users, but the vast majority will be involved, at most, in minor levels of deviance. The number who engage in serious criminal activity is small. That being said, underground forums have played a significant role in several recent high-profile cybercrime activities. In this work we apply data science approaches to understand criminal pathways and characterize key actors related to illegal activity in one of the largest and longest- running underground forums. We combine the results of a logistic regression model with k-means clustering and social network analysis, verifying the findings using topic analysis. We identify variables relating to forum activity that predict the likelihood a user will become an actor of interest to law enforcement, and would therefore benefit the most from intervention. This work provides the first step towards identifying ways to deter the involvement of young people away from a career in cybercrime.
dc.description.sponsorshipAlan Turing Institute
dc.identifier.doi10.17863/CAM.31808
dc.identifier.eissn1611-3349
dc.identifier.isbn9783030004699
dc.identifier.issn0302-9743
dc.identifier.urihttps://www.repository.cam.ac.uk/handle/1810/284436
dc.language.isoeng
dc.publisherSpringer International Publishing
dc.publisher.urlhttp://dx.doi.org/10.1007/978-3-030-00470-5_10
dc.subjectCybercrime
dc.subjectUnderground forums
dc.subjectSocial behaviour
dc.subjectCriminal pathways
dc.titleCharacterizing eve: Analysing cybercrime actors in a large underground forum
dc.typeConference Object
dcterms.dateAccepted2018-05-29
prism.endingPage227
prism.publicationDate2018
prism.publicationNameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
prism.startingPage207
prism.volume11050 LNCS
pubs.conference-finish-date2018-09-12
pubs.conference-nameRAID 2018: 21st International Symposium on Research in Attacks, Intrusions, and Defenses
pubs.conference-start-date2018-09-10
pubs.funder-project-idEngineering and Physical Sciences Research Council (EP/M020320/1)
pubs.funder-project-idAlan Turing Institute (DS_SDS_1718_4)
rioxxterms.licenseref.startdate2018-01-01
rioxxterms.licenseref.urihttp://www.rioxx.net/licenses/all-rights-reserved
rioxxterms.typeConference Paper/Proceeding/Abstract
rioxxterms.versionAM
rioxxterms.versionofrecord10.1007/978-3-030-00470-5_10

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
RAID_2018.pdf
Size:
1.37 MB
Format:
Adobe Portable Document Format
Description:
Accepted version
Licence
http://www.rioxx.net/licenses/all-rights-reserved
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
DepositLicenceAgreement.pdf
Size:
417.78 KB
Format:
Adobe Portable Document Format
Download

Collections

Cambridge University Research Outputs