Identifying, Collecting, and Presenting Hacker Community Data: Forums, IRC, Carding Shops, and DNMs
Identifying, Collecting, and Presenting Hacker Community Data: Forums, IRC, Carding Shops, and DNMs
复制标题
DOI：
10.1109/isi.2018.8587327
复制
发表时间：
2018-11
期刊：
影响因子：
--
通讯作者：
Po-Yi Du;Ning Zhang;Mohammadreza Ebrahimi;Sagar Samtani;Ben Lazarine;N. Arnold;Rachael Dunn;Sandeep Suntwal;Guadalupe Angeles;Robert Schweitzer;Hsinchun Chen
中科院分区：
文献类型：
--
作者：
Po-Yi Du;Ning Zhang;Mohammadreza Ebrahimi;Sagar Samtani;Ben Lazarine;N. Arnold;Rachael Dunn;Sandeep Suntwal;Guadalupe Angeles;Robert Schweitzer;Hsinchun Chen
网络攻击每年使全球经济损失超过4500亿美元。为了解决这个问题，研究人员和从业人员投入了巨大的努力来开发网络威胁情报，或识别新兴威胁和关键黑客的过程。然而，对内部网络数据的依赖导致了固有的反应性情报。CTI的专家们强调了积极主动地研究不断发展的大型在线黑客社区的重要性。尽管它们具有CTI价值，但从黑客社区平台收集数据是一项重要的任务。在本文中，我们总结了我们在系统地识别和自动收集大规模黑客论坛，卡店，互联网中继聊天和暗网市场方面所做的努力。我们还将努力通过AZSecure Hacker Assets Portal（www.azsecure-hap.com）向更大的CTI社区提供这些数据。通过我们的方法，我们收集了102个平台，共43，981，647条记录。据我们所知，这个黑客社区数据的汇编是学术界最大的此类收集。
Cyber-attacks cost the global economy over $450 billion annually. To combat this issue, researchers and practitioners put enormous efforts into developing Cyber Threat Intelligence, or the process of identifying emerging threats and key hackers. However, the reliance on internal network data to has resulted in inherently reactive intelligence. CTI experts have urged the importance of proactively studying the large, ever-evolving online hacker community. Despite their CTI value, collecting data from hacker community platforms is a non-trivial task. In this paper, we summarize our efforts in systematically identifying and automatically collecting a large-scale of hacker forums, carding shops, Internet-Relay-Chat, and Dark Net Marketplaces. We also present our efforts to provide this data to the larger CTI community via the AZSecure Hacker Assets Portal (www.azsecure-hap.com). With our methodology, we collected 102 platforms for a total of 43,981,647 records. To the best of our knowledge, this compilation of hacker community data is the largest such collection in academia.