Title
Tools for Automated Analysis of Cybercriminal Markets.
Abstract
Underground forums are widely used by criminals to buy and sell a host of stolen items, datasets, resources, and criminal services. These forums contain important resources for understanding cybercrime. However, the number of forums, their size, and the domain expertise required to understand the markets makes manual exploration of these forums unscalable. In this work, we propose an automated, top-down approach for analyzing underground forums. Our approach uses natural language processing and machine learning to automatically generate high-level information about underground forums, first identifying posts related to transactions, and then extracting products and prices. We also demonstrate, via a pair of case studies, how an analyst can use these automated approaches to investigate other categories of products and transactions. We use eight distinct forums to assess our tools: Antichat, Blackhat World, Carders, Darkode, Hack Forums, Hell, L33tCrew and Nulled. Our automated approach is fast and accurate, achieving over 80% accuracy in detecting post category, product, and prices.
Year
DOI
Venue
2017
10.1145/3038912.3052600
WWW
Keywords
Field
DocType
Cybercrime, Machine Learning/NLP, Measurement
Data science,Data mining,World Wide Web,Subject-matter expert,Computer science,Cybercrime,Artificial intelligence,Machine learning
Conference
Citations 
PageRank 
References 
12
0.54
23
Authors
8
Name
Order
Citations
PageRank
Rebecca S. Portnoff1503.20
sadia afroz227418.85
Greg Durrett334126.94
Jonathan K. Kummerfeld49316.19
Taylor Berg-Kirkpatrick555435.93
damon mccoy62073125.49
Kirill Levchenko7123583.12
Vern Paxson8140312130.20