Cybercrime Prevention Research Articles

사이버 범죄 예방을 위한 Cyber CPTED 모델 제시에 관한 연구

사이버 범죄 예방을 위한 Cyber CPTED 모델 제시에 관한 연구

Digital Fingerprint and Forensic Examination as a Technology for Cybercrime Detection and Prevention in Nigeria

Digital Fingerprint and Forensic Examination as a Technology for Cybercrime Detection and Prevention in Nigeria

Coping with Cybercrime Victimization: An Exploratory Study into the Impact and Change

An increasing number of Internet users are dealing with cybercrime victimization. In order to find out whether victims adequately recover from cybercrime incidents, it is important to gain insight into its effects and impact on users. However, as it stands now, there is not much literature on the impact of cybercrime. We address this gap by qualitatively examining the impact of two types of cybercrime, namely phishing and malware attacks targeting online banking customers. We used the coping approach as a framework to study how victims deal with the negative events they have experienced. In order to study the impact of cybercrime and how victims cope with it, 30 cybercrime victims were interviewed. We observed that, next to financial damage, victims described different forms of psychological and emotional effects. Victims also reported various kinds of secondary impacts, such as time loss and not being treated properly when handling the incident. In addition, the interview data provided insight into cognitive and behavioral change, which potentially offers opportunities for cybercrime prevention. Our study demonstrates that the level of impact varies among cybercrime victims, ranging from little or no impact to severe impact. In addition, while some victims were only affected for a few days, some were still feeling the effects. The effects and impact of these fraudulent schemes on victims should therefore not be underestimated. We conclude that the coping approach provides a useful framework to study the effects and impact of cybercrime victimization and how victims recover from it. The results of our study provide a steppingstone for future studies on this topic.

A Study on Comparison of Security Features in Public and Private Sector Banks on Prevention of Cyber Crime

A Study on Comparison of Security Features in Public and Private Sector Banks on Prevention of Cyber Crime

English

English

Making cybercrime prevention the highest priority

The threat of cybercrime continues to evolve and grow as criminals adapt to new security measures and take advantage of changes to our online behaviour. The only constant appears to be our vulnerability: whatever new steps are taken by companies or individuals, the criminals always seem to be one step ahead.The threat of cybercrime continues to evolve and grow, as criminals adapt to new security measures and take advantage of changes to our online behaviour.To get ahead of the criminals we need to change the way we do things. Business leaders must recognise the threat and ensure that their organisation is adequately prepared and protected. Leaving cyber-security to the IT department is a dereliction of duty, explains Matt Eddolls of CoreStream.

Cyber Bullying in the Netherlands: A Criminological Perspective

IntroductionThe internet has become a common and indispensable phenomenon in our society. At the same time, cyber crime generates a lot of media attention. Furthermore, reports on the prevalence of cyber crime appear regularly and the Dutch government prioritizes the tracking and prevention of cyber crime. The term 'cyber crime' refers to criminal and deviant behaviour through the use of online technologies (Wall, 2001; Yar, 2012). Cyber crime is, either implicitly or explicitly, conceptualized as the contemporary counterpart of traditional crime, i.e., crimes that occur only in the offline world (Taylor, Fritsch, Liederbach, & Holt, 2010). Studies on cyber crime predominantly focus on identifying the types and prevalence of cyber crimes and often lack a theoretical base. Studies on the applicability of criminological theories to cyber crime are scarce (McQuade, 2006; Taylor, Caeti, Loper, Fritsch & Liederbach, 2006). Anyone who studies cyber crime will eventually have to look in to theories in order to find an explanation for the findings. At the same time, research is necessary to test the applicability of criminological theories to cyber crime or, to further develop theoretical approaches (e.g., Bernard, 2002; Bottoms, 2000). Lately, criminologists have been debating whether existing criminological theories are useful for the explanation of cyber crime or whether the phenomenon requires novel theoretical explanations (Jaishankar, 2008). In essence, the question is whether cyber crime constitutes a new category of criminal behaviour (Yar, 2005; Jaishankar, 2008; Holt, 2013; Yar, 2012).The Offline-Online dichotomy in relation to Cyber CrimeResearchers, politicians, and policy makers see the offline and online worlds as two separate worlds. The two are regarded as opposites, and characteristics attributed to the online world do not apply to the offline world: the transformation of time-space relationships, (perceived) anonymity, and the relative ease with which social identities can be manipulated (Yar, 2006). Of these characteristics, (perceived) anonymity is particularly connected with online disinhibition: in the online world people behave with fewer restrictions and inhibitions than in the offline world (Suler, 2004). With the arrival of the internet, a new world seems to have emerged: the online world, or cyber space. The question is, however, whether the offline-online dichotomy does justice to the complexity and interrelatedness of offline and online interactions. Subrahmanyam and Smahel (2011) call attention to the immense development in the use of online technologies since the arrival of the internet and argue that the offline and online worlds are interwoven. Research also shows that online interactions of youth occur predominantly in the context of existing relationships (Livingstone, Haddon, Gorzig, & Olafsson, 2011) and that young people increasingly see their offline and online interactions as a coherent experience (Livingstone, 2009).Researchers, politicians, and policy makers also use a dichotomy with respect to crime. Traditional crime takes place in the offline world, whereas cyber crime is committed using online technologies (Wall, 2001; Yar, 2012). There is no consistent definition of cyber crime; it is an overarching term that includes new forms of criminal behaviour - such as hacking - as well as digital forms of traditional crime (Stol, 2012).3 In addition, online deviant behaviour - although not liable to punishment - is also seen as part of cyber crime; an often cited example is cyber bullying (Yar, 2012). For example, in the Dutch Safety Monitor, one of the four investigated cyber crimes is cyber bullying (Veiligheidsmonitor 2013, p. 75). Technology has always been used in criminal activities, but the definition and categorizing of a large variety of criminal and deviant behaviours on the basis of technology is new (McGuire, 2007). The question is whether cyber crime differs fundamentally from traditional crime or whether the arrival of the internet merely offers new options for criminal behaviour (Leukfeldt, Domenie, & Stol, 2010). …

A Cybercrime Prevention Program based on Simulation and Quiz Game: Applying Item Response Theory for Effective Information Security Learning

Recently, as utilization rate of the Internet gets higher, cybercrime rates are growing up. In order not to be damaged from such cybercrimes, the importance of an education for protection from them is increasingly critical. However, the existing information security educations have not been enough to deal effectively with rising cybercrimes. To tackle the problems of the existing educations, in this paper, we examine a way to prevent cybercrimes using learning contents related to a real life, help learners to improve awareness of cybercrimes and realize their seriousness through an indirect experience of them. We develop a program with learning contents based on a simulation for preventing cybercrimes. Furthermore, we provide a quiz game to enhance the understanding of the cybercrimes. After learning through the quiz game, the learners can check and extend their knowledge of preventing the cybercrimes. Specifically, each learner can identify vulnerable cybercrime types and get the proper feedbacks for preventing them through the analysis of learner’s own correct/wrong answers.

Biometric Authentication Using Fused Multimodal Biometric

Biometrics are basically based on the expansion of pattern recognition systems. At present, electronic or optical sensors like cameras and scanning devices are used to capture images, recordings or measurements of a person's ‘unique’ characteristics. These technologies are being utilized across a range of applications like security, prevention of cyber crime and border control, public aid/social benefits, customs, immigration, passport and healthcare identity verification, as well as commercial enterprises use. Most biometric systems that are typically use a single biometric trait to establish identity have some challenges like Noise in sensed data which increases False Acceptance Rate (FAR) of the system, Non-universality which reduces Genuine Acceptance Rate (GAR). Hence the security afforded by the biometric system mitigates its benefits. In this paper, we propose a Fused Multimodal systems which also have several advantages over unibiometric systems such as, enhanced verification accuracy, larger feature space to accommodate more subjects and higher security against spoofing. The proposed enhanced multimodal authentication system is based on feature extraction(using fingerprint, retina and fingervein) and key generation (using RSA). The experimental evaluation implemented using MATLAB 2014, illustrates the significance improvement in the performance of multimodal biometrics with RSA have GAR of 95.3% and FAR of 0.01%.

Cyber Crime and its Related Aspects under I.T. Act, 2000 and its Prevention

Cyber Crimes are increasing day by day and are posing a great threat to internet users. This paper discusses the Cyber crime, its nature and types. Various tools and techniques used for cyber crime are evaluated in this paper. The paper also discusses cyber related laws under Indian Penal Code and their application to the cyber offences. With the discussion of cyber crimes, this paper proposes the strategies to prevent cyber crimes and recommend policies for cyber crime prevention.

Cybercrime Tendencies and Legislation in the Republic of Macedonia

The advancement of information and communication technologies opens new venues and ways for cybercriminals to commit crime. There are several different types of cybercrime offences that need to be treated in a separate and different manner. The major international source that provides guidelines for treatment of cybercrime is the Convention on Cybercrime adopted by the Council of Europe and the European Commission Action Plan. The purpose of the paper is to present, discuss and analyze the Macedonian legislation treating cybercrime, with respect to the specific cases typically encountered in practice and the international guidelines concerning cybercrime. The major source of cybercrime legislation in Macedonia is the Criminal Code with provisions thereof in ten of its articles; it addresses cybercrimes such as personal data abuse, copyright and piracy issues, production and distribution of child pornography, computer viruses, intrusions into computer systems, computer fraud and computer forgery. We also present and analyze reports on cybercrime complaints and victims from Macedonia, issued by the Internet Crime Complaint Center and the Macedonian Ministry of Internal Affairs. The reports reveal the unusually high number of complaints for perpetrators and victims originating from Macedonia. Furthermore, we highlight several recent cybercrime cases reported in Macedonia. All things considered, the Macedonian penal legislation is modern and it follows the current European and world standards. It provides guidelines for successful resolution of cybercrime committed in the Republic of Macedonia. However, it could be improved by a more active inclusion of Macedonian authorities in the global response to cybercrime and by stronger enforcement of cybercrime prevention measures and strategies.

Cybercrime, criminal libel and the media: From ‘e-martial law’ to the Magna Carta in the Philippines

President Ferdinand E. Marcos declared martial law in the Philippines on 21 September 1972. Issuing the declaration under Proclamation 1081 which suspended civil rights, gagged the news media and imposed military authority in the country, Marcos defended this draconian move under the Philippines Constitution in response to a series of bombings allegedly caused by communist rebels. The emergency rule at the height of the Cold War was also planned to quell rebellion and drive national development. Four decades later, on 12 September 2012, President Benigno Aquino III signed Republic Act No. (RA) 10175, or the Cybercrime Prevention Act, into law. This legislation was immediately widely condemned as a threat to freedom of expression on the internet, the media and online privacy and has been likened by human rights groups, media freedom advocates, ‘netizens’ and opposition Congress members as comparable to the Marcos Martial Law era. Kabataan Representative Raymond Palatino branded the legislation ‘e-Martial Law’, comparing it to repressive Marcos-era decrees censoring and harassing the media. Fifteen Supreme Court appeal petitions were lodged against the Cybercrime Law but the subsequent ruling found the law constitutional in February 2014. This article examines the law, challenges since the constitutional ruling, and demands for repealing the law and replacing it with a so-called ‘Magna Carta’ of internet media freedom.Pictured: Figure 1: Protests against the Cybercrime Law have been widespread in the Philippines. Image: Interaksyon

Applications of Artificial Intelligence Techniques to Combating Cyber Crimes: A Review

With the advances in information technology (IT) criminals are using cyberspace to commit numerous cyber crimes. Cyber infrastructures are highly vulnerable to intrusions and other threats. Physical devices and human intervention are not sufficient for monitoring and protection of these infrastructures; hence, there is a need for more sophisticated cyber defense systems that need to be flexible, adaptable and robust, and able to detect a wide variety of threats and make intelligent real-time decisions. Numerous bio-inspired computing methods of Artificial Intelligence have been increasingly playing an important role in cyber crime detection and prevention. The purpose of this study is to present advances made so far in the field of applying AI techniques for combating cyber crimes, to demonstrate how these techniques can be an effective tool for detection and prevention of cyber attacks, as well as to give the scope for future work.

Предупреждение компьютерной преступности в Российской Федерации: интегративный и комплексный подходы

Предупреждение компьютерной преступности в Российской Федерации: интегративный и комплексный подходы

Impact of a participatory cyber crime prevention programme on secondary school students’ attainment in crime prevention concepts in civic education and social studies

Nigeria is considered by many to be a cyber crime hot spot, and is often ranked among the world's top cyber crime committing countries (e.g. advanced fee fraud is also known as Nigerian scams and 419 scams--419 is a section under the Nigerian Criminal Code Act that prohibits obtaining goods by false pretences). We designed a cyber crime prevention programme based on the action research paradigm. We the used the pretest-postest quasi experimental design to evaluate the impact of the action cyber crime prevention programme on 218 Nigerian secondary school students' attainment in Civic Education and Social Studies. The students were purposefully selected from whole classes in six secondary schools in Nigeria. Our analysis suggested that the action cyber crime prevention programme has a positive effect on students' attainment in cyber crime prevention. Future work includes extending the Action Cyber Crime Prevention Programme to a wider audience in Nigeria and other developing countries.

Combating the threats of cybercrimes in Malaysia: The efforts, the cyberlaws and the traditional laws

Cybercrimes are increasing in Malaysia. According to a report the crimes jumped by 88 per cent in 2011 with 15,218 cases compared with 8090 in 2010. This report has caused a lot of concern from the Government and the public. At a glance, these crimes are like ‘diseases’ spreading throughout the country and causing damage to people, the economy and the country. Although various efforts have been taken and some are still ongoing, total prevention of cybercrime is very difficult. Combating the threat is very challenging since Malaysia is still lacking in many of the tools required including manpower and technology. But the efforts will continue. This paper discusses some of the efforts taken by the Government and other organisations to deal with these problems followed by an analysis on the application of cyberlaws and how these measures work together with the traditional law in tackling cybercrime cases.

A novel method of mining network flow to detect P2P botnets

Botnets are a serious threat to cyber-security. As a consequence, botnet detection has become an important research topic in network protection and cyber-crime prevention. P2P botnets are one of the most malicious zombie networks, as their architecture imitates P2P software. Characteristics of P2P botnets include (1) the use of multiple controllers to avoid single-point failure; (2) the use of encryption to evade misuse detection technologies; and (3) the capacity to evade anomaly detection, usually by initiating numerous sessions without consuming substantial bandwidth. To overcome these difficulties, we propose a novel data mining method. First, we identify the differences between P2P botnet behavior and normal network behavior. Then, we use these differences to tune the data-mining parameters to cluster and distinguish normal Internet behavior from that lurking P2P botnets. This method can identify a P2P botnet without breaking the encryption. Furthermore, the detection system can be deployed without altering the existing network architecture, and it can detect the existence of botnets in a complex traffic mix before they attack. The experimental results reveal that the method is effective in recognizing the existence of botnets. Accordingly, the results of this study will be of value to information security academics and practitioners.

Data Protection and the Prevention of Cybercrime - The EU as an Area of Security?

Cybercrime and cyber-security are attracting increasing attention, both for the relevance of Critical Information Infrastructure to the national economy and security, and the interplay of the policies tackling them with ‘ICT sensitive’ liberties, such as privacy and data protection. This study addresses the subject in two ways. On the one hand, it aims to cast light on the (legal substantive) nature of, and relationship between, cybercrime and cyber security, which are currently ‘terms of hype’ (and therefore it is descriptive). On the other, it explores the possibility of reconciling data protection and privacy with the prevention of cybercrime and the pursuit of a cyber-security policy (and therefore it explores causation). As such, the subject falls in the ‘security vs. privacy’ debate, and wishes in particular to investigate whether it is possible to build ‘human rights by design’ security policies, i.e. a security policy that reconciles both security and human rights. My argument hinges on a clarification of the term ‘cybercrime’ (and cyber-security), both by building on the literature – which recognises the mix of traditional crimes committed by electronic means (broad cybercrime or off-line crimes), and novel crimes possible only in the online environment (narrow cybercrime or online crimes) – and on original interpretations as far as the relationship between cybercrime and cyber-security is concerned. I argue that narrow (or online) crimes and broad (or off-line) crimes are profoundly different in terms of underlying logics while facing the same procedural challenges, and that only narrow cybercrime pertains to cyber-security, understood as a policy. Yet, the current policy debate is focussing too much on broad cybercrimes, thus biasing the debate over the best means to tackle ICT-based crimes and challenging the liberties involved. I then claim that the implementation of data protection principles in a cyber-security policy can act as a proxy to reduce cyber threats, and in particular (narrow) cybercrime, provided that the following caveats are respected: i) we privilege a technical computer security notion; ii) we update the data protection legislation (in particular the understanding of personal data); and iii) we adopt a coreperiphery approach to human rights. The study focuses on the European Union. The interaction between privacy and data protection and other liberties involved, as well as purely procedural issues, are outside of the scope of this research.

Blackberry and Handheld Devices: Management Productivity Aid or Cyber-Crime Tools?

Handheld devices such as mobile phones and PDAs have permeated organizational daily life along with the growth of information communication technologies. In this analysis, the researchers will explore the advantages and disadvantages of the use of these handheld devices, and possible sources of cyber-crime. Also, several solutions and strategies are suggested for dealing with cyber-crime. This research is a study to investigate the nature of handheld devices and cyber-crime, future research opportunities reside in the area of cyber-crime prevention strategies from a management standpoint and legislation from government agencies.

The Perpetration and Prevention of Cyber Crime

Cyber crime has become an integral part of the transnational threat landscape and conjures up pressing images of nefarious and increasingly complex online activity. More recently, the concept of ‘organized crime’ has been attributed to cyber criminality. There has been subsequent disagreement and confusion concerning whether such crime is a derivation of traditional organized crime or an evolution of such crime within the online space. This paper analyses the opaque state of affairs which has been exacerbated by the relative lack of clear evidence attesting to and supporting either scenario. Technological advances have always been used to the advantage of the criminal fraternity. The crucial question that remains is whether those advances have merely facilitated the commission of physical crime or whether in fact they have led to the creation of a new wave of traditional, but virtual, organized crime. The paper also explores the behavioral ramifications on cyber crime on the informational value of the internet and its usage in consumer with demographic analysis level of its threat and increasing crime rate thus eroding the attractiveness of internet as a viable marketing channel.