2016 | Journal of Management Information Systems | Citations: 0
Authors: Benjamin, Victor; Zhang, Bin; Jr, Jay F. Nunamaker; Chen, Hsinchun
Abstract: To further cybersecurity, there is interest in studying online cybercriminal com ...
Expand
Abstract: To further cybersecurity, there is interest in studying online cybercriminal communities to learn more about emerging cyber threats. Literature documents the existence of many online Internet Relay Chat (IRC) cybercriminal communities where cybercriminals congregate and share hacking tools, malware, and more. However, many cybercriminal community participants appear unskilled and have fleeting interests, making it difficult to detect potential long-term or key participants. This is a challenge for researchers and practitioners to quickly identify cybercriminals that may provide credible threat intelligence. Thus, we propose a computational approach to analyze cybercriminals IRC communities in order to identify potential long-term and key participants. We use the extended Cox model to scrutinize cybercriminal IRC participation for better understanding of behaviors exhibited by cybercriminals of importance. Results indicate that key cybercriminals may be quickly identifiable by assessing the scale of their interaction and networks with other participants.
Collapse
Semantic filters:
Wang–Chang estimator
Topics:
computer crime IT security online community participatory design denial of service attack
Methods:
proportional hazards model survival analysis support vector machine Kaplan-Meier estimator nonparametric test
