EAGER: ISN: Detecting and Disrupting Illicit Supply Networks via Traffic Distribution Systems

这一早期概念探索性研究补助金(AGERGE)将通过促进我们对支持非法供应网络的在线基础设施的了解和破坏的能力，来加强国家健康、繁荣和安全。恶意广告导致很大一部分在线用户接触到恶意内容，包括来自非法供应网络的内容，比如那些贩卖假冒奢侈品和假药的网络。这些滥用服务不仅泄露私人信息并造成经济损害，而且在未经许可的药品情况下，还可能损害公众健康。该项目的重点是开发方法，通过瞄准使这些非法供应链成为可能的流量分配系统，即负责将用户从网关页面重定向到最终滥用服务的在线主机，来检测和扰乱这些非法供应链。绘制这些网络的地图并最终摧毁它们的宿主将增加非法商业的成本，产生积极的经济和公共卫生影响。该奖项将支持研究生从事具有高度社会影响的研究。该项目旨在了解、测量、建模和扰乱交通分配系统，并表征这种扰乱对非法商品和服务定价的影响。通过设计多个高毒性的URL流，并每天从多个地理位置和多个浏览代理自动爬行这些URL，该项目将能够收集大量的流量分配系统以及利用它们的滥用服务。该项目包括开发将收集到的网络踪迹转换为有向图的技术、属于同一行为者的节点的归属和合并，以及使用这些图在存在业务限制的情况下对拆除的影响进行建模。这项研究将发现和记录这些非法行动是如何运作的，改进对其滥用服务的自动检测，并向其他研究人员提供关于交通分配系统的操作及其对中断的脆弱性的数据。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

This EArly-concept Grant for Exploratory Research (EAGER) will enhance national health, prosperity, and security by contributing to our understanding of and ability to disrupt the online infrastructure that supports illicit supply networks. Malicious advertising is responsible for exposing a large fraction of online users to malicious content, including content from illicit supply networks, such as those trafficking in fake luxury goods and counterfeit pharmaceuticals. These abusive services not only exfiltrate private information and cause economic harm, but can also, in the case of unlicensed pharmaceutical products, damage public health. This project focuses on developing methods to detect and disrupt these illicit supply chains by targeting the traffic distribution systems that enable them, i.e., the online hosts that are responsible for redirecting users from gateway pages to the final abusive service. Mapping these networks and ultimately taking down their hosts will increase the cost of illicit commerce, yielding positive economic and public health impact. The award will provide support to engage graduate students in research with high societal impact.The project seeks to understand, measure, model, and disrupt traffic distribution systems as well as characterize the effects of this disruption on the pricing of illicit goods and services. By devising multiple high-toxicity URL streams and automatically crawling these URLs on a daily basis from multiple geographical locations and multiple browsing agents, this project will enable the collection of a large number of traffic distribution systems as well as the abusive services that utilize them. The project includes the development of techniques for converting the collected network traces into directed graphs, the attribution and merging of nodes belonging to the same actors, and the use of these graphs for modeling the effects of takedowns in the presence of operational constraints. This research will discover and document how these illicit operations function, improve the automated detection of their abusive services, and provide data to other researchers on the operations of traffic distribution systems and their vulnerability to disruptions.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.