Platforms in Everything: Analyzing Ground-Truth Data on the Anatomy and Economics of Bullet-Proof Hosting
Platforms in Everything: Analyzing Ground-Truth Data on the Anatomy and Economics of Bullet-Proof Hosting
复制标题
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Arman Noroozian;J. Koenders;Eelco van Veldhuizen;C. Gañán;Sumayah A. Alrwais;Damon McCoy;M. V. Eeten
中科院分区：
文献类型：
--
作者：
Arman Noroozian;J. Koenders;Eelco van Veldhuizen;C. Gañán;Sumayah A. Alrwais;Damon McCoy;M. V. Eeten
本文介绍了第一个实证研究的基础上，一个主要的防弹主机（BPH）提供商，一家名为Maxided的公司的地面真相数据。BPH允许不法分子主持犯罪活动，以支持各种网络犯罪商业模式，如网络钓鱼，僵尸网络，DDoS，垃圾邮件和假冒药品网站。Maxided被执法部门合法关闭，其后端服务器被查封。我们分析从后端数据库中提取的数据，并将其连接到各种外部数据源，以描述Maxided的商业模式，供应链，客户和财务状况。我们的理由是什么“内部”的观点揭示了潜在的阻塞点扰乱BPH提供商。我们证明了BPH的格局已经从敏捷的经销商进一步转向市场平台，来自数百家合法上游托管提供商的资源供过于求。我们发现BPH供应商在供应链中几乎没有可以干预的瓶颈，尽管利润率非常低，因此即使运营成本略有增加，也可能已经产生影响，使业务不可持续。另一个干预选择是拆除平台本身。
This paper presents the first empirical study based on ground-truth data of a major Bullet-Proof Hosting (BPH) provider, a company called Maxided. BPH allows miscreants to host criminal activities in support of various cybercrime business models such as phishing, botnets, DDoS, spam, and counterfeit pharmaceutical websites. Maxided was legally taken down by law enforcement and its backend servers were seized. We analyze data extracted from its backend databases and connect it to various external data sources to characterize Maxided's business model, supply chain, customers and finances. We reason about what the ``inside'' view reveals about potential chokepoints for disrupting BPH providers. We demonstrate the BPH landscape to have further shifted from agile resellers towards marketplace platforms with an oversupply of resources originating from hundreds of legitimate upstream hosting providers. We find the BPH provider to have few choke points in the supply chain amendable to intervention, though profit margins are very slim, so even a marginal increase in operating costs might already have repercussions that render the business unsustainable. The other intervention option would be to take down the platform itself.