Cyber-crime Science

Pieter HartelMarianne JungerSusanne Barth

The Course

• Goals– Study cybercrime from a social perspective

• Organisation– Teams of three (for 5 EC)– Do an experiment– Write a paper– Review other papers– Present the paper at a conference

Cyber-crime Science 2

Cyber-crime Science 3

Contents

• Theory– What is Crime and Cyber-crime?– Technology (ICT) creates opportunity– Crime Science is evidence based– Opportunity reduction works

• Practice– How to do an opportunity reducing

experiment?– How to report on the evidence.

4

Crime and Cyber-crime

• Crime– Behaviour commonly considered harmful,

serious• Disorder

– Lack of order, broader than crime• Cyber-crime

– ICT used as a tool, target or place

Cyber-crime Science

[New09] G. R. Newman. Cybercrime. In M. D. Krohn, et al, editors, Handbook on Crime and Deviance. Springer, Nov 2009. http://dx.doi.org/10.1007/978-1-4419-0245-0_25

Porn on video billboard

Cyber-crime Science 5

Cyber-crime is big business

Global cost Estimate (B$) Year

Anti-virus 3.4 2012

Patching 1 2010

ISP clean-up 0.04 2010

User clean-up 10 2012

Defence firms 10 2010

Law enforcement 0.4 2010

Cyber-crime Science 6

[And12] R. Anderson, C. Barton, R. Böhme, R. Clayton, M. J. G. van Eeten, M. Levi, T. Moore, and S. Savage. Measuring the cost of cybercrime. In 11th Workshop on the Economics of Information Security (WEIS), Berlin, Germany, Jun 2012. http://weis2012.econinfosec.org/papers/Anderson_WEIS2012.pdf

ICT creates opportunity

• Offenders know that they run little risk

• Targets often don’t understand the risks

• Cyber disinhibits

Cyber-crime Science 7

Crime Science

• Five principles of opportunity reduction1. Increase effort2. Increase risks3. Reduce rewards4. Reduce provocation5. Remove excuses

• Measure the effect of the intervention

Cyber-crime Science 8

9

Opportunity reduction works

Cyber-crime Science

[Kum09] P. Kumaraguru, J. Cranshaw, A. Acquisti, L. Cranor, J. Hong, M. Blair, and T. Pham. School of phish: a real-word evaluation of anti-phishing training. In 5th Symp. on Usable Privacy and Security (SOUPS), page Article 3, Mountain View, California, Jul 2009. ACM. http://dx.doi.org/10.1145/1572532.1572536

Clicked on link (%)

Practice

Cyber-crime Science 10

Question• Is an intervention as coursework

feasible?– Yes, but it’s hard work– … and it can be a lot of fun

• Check out what the teams have done in previous years

Cyber-crime Science 11

[Har12] P. H. Hartel and M. Junger. Teaching engineering students to "think thief". Technical Report TR-CTIT-12-19, CTIT, University of Twente, Jul 2012. http://eprints.eemcs.utwente.nl/22066/

Interactive trash cans N=24

Cyber-crime Science 12

Plan

Cyber-crime Science 13

team+topic

Draftresearchproposal

Finalproposal &

slide

approval ethical committeeexperiment & draft paper

finalpaper

review &slides

(7 weeks)

(4 weeks)

(7 weeks)

Present Present

2ndresearchproposal

Present

Help is at hand

• What?– Clinics: get feedback or discuss– F2F or via Skype

• When?– Sign up via the doodle to get a timeslot

• More details on website

Cyber-crime Science 14

Examination• By coursework only

– Quality of the paper– Quality of the reviews– Quality of the presentations

• You will be marked by your peers– And you may not like it…– But the lecturers are the moderators

Cyber-crime Science 15

What to consider and when?• Team topic (week 1)

– What is the crime and how will you prevent it?• Draft proposal (week 3)

– What are the risks for the all involved?– What is the control group?

• Final draft proposal (week 5)– Does my design work? Do a pilot!

• Draft paper (week 14)– Can someone else repeat the experiment?

• Final paper (week 18)– Are the results statistically significant?

Cyber-crime Science 16

Cyber-crime Science 17

Web site

• http://www.ewi.utwente.nl/~pieter/CCS/