Markets for cybercrime tools and stolen data : hackers' bazaar /

Saved in:
Bibliographic Details
Author / Creator:Ablon, Lillian, author.
Imprint:Santa Monica, CA : RAND Corporation, [2014]
©2014
Description:xv, 65 pages : color illustrations ; 28 cm
Language:English
Subject:
Format: Print Book
URL for this record:http://pi.lib.uchicago.edu/1001/cat/bib/10143637
Hidden Bibliographic Details
Other authors / contributors:Libicki, Martin C., author.
Abler, Andrea M. author.
Rand Corporation, issuing body.
Acquisition and Technology Policy Center, researcher.
Juniper Networks, Inc., sponsoring body.
Rand Corporation. National Security Research Division, sponsoring body.
ISBN:0833087118
9780833087119
Notes:"RAND National Security Research Division."
"The research described in this report was sponsored by Juniper Networks and conducted within the Acquisition and Technology Policy Center of the RAND National Security Research Division"--Title page verso.
"RR-610-JNI"--Page 4 of cover.
Includes bibliographical references (pages 53-65).
Summary:"Criminal activities in cyberspace are increasingly facilitated by burgeoning black markets for both tools (e.g., exploit kits) and take (e.g., credit card information). This report, part of a multiphase study on the future security environment, describes the fundamental characteristics of these markets and how they have grown into their current state to explain how their existence can harm the information security environment. Understanding the current and predicted landscape for these markets lays the groundwork for follow-on exploration of options to minimize the potentially harmful influence these markets impart. Experts agree that the coming years will bring more activity in darknets, more use of crypto-currencies, greater anonymity capabilities in malware, and more attention to encrypting and protecting communications and transactions; that the ability to stage cyberattacks will likely outpace the ability to defend against them; that crime will increasingly have a networked or cyber component, creating a wider range of opportunities for black markets; and that there will be more hacking for hire, as-a-service offerings, and brokers. Experts disagree, however, on who will be most affected by the growth of the black market (e.g., small or large businesses, individuals), what products will be on the rise (e.g., fungible goods, such as data records and credit card information; non-fungible goods, such as intellectual property), or which types of attacks will be most prevalent (e.g., persistent, targeted attacks; opportunistic, mass 'smash-and-grab' attacks)."
Table of Contents:
  • Summary
  • Introduction and research methodology
  • Characteristics of the black market
  • The black market and botnets
  • Zero-day vulnerabilities in the black and gray markets
  • Are hacker black markets mature?
  • Projections and predictions for the black market
  • Conclusions
  • For future research
  • Appendixes. A. Text of the black market timeline ; B. Glossary.