On-line Activities, Guardianship, and Malware Infection: An Examination of Routine Activities Theory
On-line Activities, Guardianship, and Malware Infection: An Examination of Routine Activities Theory
复制标题
DOI：
--
复制
发表时间：
2009
影响因子：
1
通讯作者：
A. Bossler;T. Holt
中科院分区：
文献类型：
--
作者：
A. Bossler;T. Holt
简介互联网和万维网极大地改变了我们在世界各地交流、生活和开展业务的方式。这些进步改变了传统活动，如银行业务、约会和购物，转变为个人与他人互动但既不离开家也不实际与人见面的活动（Newman & Clarke，2003）。计算机技术在现代生活中的发展和渗透，为犯罪分子提供了有效的犯罪工具，提供了没有网络空间就不可能存在的犯罪机会。然而，很少有犯罪学家实证评估计算机技术对受害的影响。因此，人们对传统犯罪理论解释网络犯罪受害的普遍性和潜在减少的能力缺乏了解。特别是，常规活动理论（Cohen & Felson，1979）可能会在这方面取得成功，因为它传统上被用来研究技术创新如何影响犯罪模式和受害。网络犯罪受害的更常见和重要形式之一是恶意软件或恶意软件造成的数据文件破坏（Furnell，2002；Taylor、Caeti、Loper、Fritsch 和 Liederbach，2006）。恶意软件通常包括改变计算机程序和文件内的功能的计算机病毒、蠕虫和特洛伊木马程序。病毒可以隐藏其在计算机系统和网络上的存在，并通过电子邮件附件、可下载文件、即时消息和其他方法进行传播（Kapersky，2003；Szor，2005；Taylor 等，2006）。特洛伊木马程序也经常通过电子邮件作为人们倾向于打开的可下载文件或附件到达，例如标题为“XXX 色情”或“购买收据”的文件。当文件打开时，它会执行某种形式的恶意代码（Furnell，2002；Szor，2005；Taylor 等人，2006）。此外，一些恶意软件是通过访问网站（特别是色情网站）来激活的，这些网站利用网络浏览器中的缺陷（Taylor et al., 2006）。尽管蠕虫由于能够使用系统内存并发送自身副本，因此不像其他恶意软件那样涉及那么多的用户交互，但人类只需打开文件中嵌入蠕虫代码的电子邮件即可促进其传播（Nazario，2003）。网络犯罪分子经常利用恶意软件破坏计算机系统并自动攻击计算机网络（Furnell，2002）。这些程序可以破坏电子邮件和网络操作、访问私人文件、删除或损坏文件，并且通常会损坏计算机软件和硬件（Taylor 等，2006）。由于多种原因，病毒在计算机网络上传播的代价可能会很高，包括数据和受版权保护的信息丢失、身份盗窃、由于客户对网站安全的担忧而造成的收入损失、删除程序所花费的时间以及个人生产力和系统功能的损失（Symantec，2003；Taylor 等，2006）。这反映在与恶意软件感染相关的美元损失上。参加最近的计算机安全研究所的美国公司报告称，仅 2006 年一年就因病毒造成了约 1500 万美元的损失（CSI，2007 年）。由于计算机系统的互连性，一个国家/地区的受感染系统可能会在全球范围内传播恶意软件，并造成更大的损害。例如，梅丽莎病毒在全世界造成了估计 8000 万美元的损失（Taylor 等人，2006 年）。因此，恶意软件感染对全球互联网用户构成了重大威胁。大量的信息安全研究探讨了恶意软件的技术方面。这些研究工作特别强调创建软件应用程序，例如可以识别和包含计算机系统上的恶意软件的防病毒程序（Kapersky，2003；PandaLabs，2007；Symantec，2003）。 ……
IntroductionThe Internet and World Wide Web have dramatically altered the way we communicate, live, and conduct business around the world. These advancements have modified traditional activities, such as banking, dating, and shopping, into activities in which individuals interact with others but neither leave the house nor actually physically meet people (Newman & Clarke, 2003). The growth and penetration of computer technology in modern life has provided criminals with efficient tools to commit crime by providing opportunities to commit crimes that could not exist without cyberspace. Few criminologists, however, have empirically assessed the impact of computer technology on victimization. As a consequence, there is a lack of understanding in the ability of traditional theories of crime to account for the prevalence and potential reduction of cybercrime victimization. In particular, routine activities theory (Cohen & Felson, 1979) may be successful in this endeavor as it has been traditionally used to examine how technological innovations affect crime patterns and victimization.One of the more common and significant forms of cybercrime victimization is the destruction of data files due to malicious software, or malware (Furnell, 2002; Taylor, Caeti, Loper, Fritsch, & Liederbach, 2006). Malware typically includes computer viruses, worms, and Trojan horse programs that alter functions within computer programs and files. Viruses can conceal their presence on computer systems and networks and spread via e-mail attachments, downloadable files, instant messaging, and other methods (Kapersky, 2003; Szor, 2005; Taylor et al., 2006). Trojan horse programs also often arrive via e-mail as a downloadable file or attachment that people would be inclined to open, such as files titled "XXX Porn" or "Receipt of Purchase." When the file is opened, it executes some form of a malicious code (Furnell, 2002; Szor, 2005; Taylor et al., 2006). In addition, some malware is activated by visiting websites, particularly pornographic websites, which exploit flaws in web browsers (Taylor et al., 2006). Though worms do not involve as much user interaction as other malware because of its ability to use system memory and to send copies of itself, humans can facilitate its spread by simply opening e-mails that have the worm code embedded in the file (Nazario, 2003).Cybercriminals often utilize malware to compromise computer systems and automate attacks against computer networks (Furnell, 2002). These programs can disrupt e-mail and network operations, access private files, delete or corrupt files, and generally damage computer software and hardware (Taylor et al., 2006). The dissemination of viruses across computer networks can be costly for several reasons, including the loss of data and copyrighted information, identity theft, loss of revenue due to customer apprehension about website safety, time spent removing the programs, and losses in personal productivity and system functions (Symantec, 2003; Taylor et al., 2006). This is reflected in the dollar losses associated with malware infection. U.S. companies who participated in a recent Computer Security Institute reported losses of approximately $15 million because of viruses in 2006 alone (CSI, 2007). An infected system in one country can spread malicious software across the globe and cause even greater damage because of the interconnected nature of computer systems. The Melissa virus, for example, caused an estimated $80 million in damages worldwide (Taylor et al., 2006). Thus, malware infection poses a significant threat to Internet users around the globe.A large body of information security research explores the technical aspects of malicious software. These research efforts have placed special emphasis on the creation of software applications like anti-virus programs that can identify and contain malicious software on computer systems (Kapersky, 2003; PandaLabs, 2007; Symantec, 2003). …