Collaborative Research: SaTC: CORE: Medium: Threat Intelligence for Targets of Coordinated Harassment

由个人和团体组成的集体协调的在线骚扰是现代互联网的一大祸害。它颠覆并夺走了生命，压制了声音，使我们的公共话语变得更加残酷，代表性变得更小。这一现象给那些寻求公平、安全和值得信赖的互联网的人带来了挑战，以减少协同攻击的威胁，并快速有效地处理攻击。利用研究团队过去在帮助亲密伴侣暴力受害者方面有用的临床模式的经验，以及对如何处理协调骚扰以减少伤害并为骚扰目标提供积极帮助的新理解，该项目试行了一个咨询诊所。为了确保这项工作具有实际的现实影响，该项目还在开发材料，并与帮助在线骚扰目标的平台、威胁情报公司和非营利组织合作。该项目使用一套全面的技术和以人为中心的方法来促进我们对协调的骚扰威胁和缓解技术的理解。骚扰的协调允许骚扰者扩大攻击规模，但也为捍卫者提供了监控攻击者的机会。该项目将研究如何使用威胁情报--一个新兴的网络安全领域，实现了对网络攻击的拦截、检测和补救--来监控发生协调骚扰和Doding活动的渠道，了解升级过程，识别痛点，并为平台、执法部门和目标个人确定行动的优先顺序。多学科团队和混合方法方法将使该项目不仅能够构建复杂的工具，而且能够在多个领域建立科学知识，并了解拟议的工具是否以及如何为复杂的社会问题提供解决方案。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Coordinated online harassment by collections of individuals and groups is a scourge of the modern Internet. It has upended and cost lives, silenced voices, and is making our public discourse more cruel and less representative. The phenomenon creates challenges for those who seek an equitable, secure and trustworthy internet to reduce the threat of coordinated attacks and handle attacks swiftly and effectively. Using the research team's past experiences with a clinical model that has been useful in helping victims of intimate partner violence, and new understandings of how to handle coordinated harassment to reduce harms and provide active assistance to targets of harassment, this project pilots an advice clinic. To ensure that the work has practical, real world impact, the project is also developing materials and working with platforms, threat intelligence companies, and non-profit organizations that help targets of online harassment .The project uses a comprehensive set of technical and human-centered methods to advance our understanding of coordinated harassment threats and mitigation techniques. The coordination of harassment allows harassers to scale their attacks, but also provides defenders with an opportunity to monitor attackers. This project will study how threat intelligence---an emerging area of cybersecurity that has enabled the blocking, detecting, and remediation of cyberattacks---can be used to monitor channels where coordinated harassment and doxing campaigns happen, understand escalation processes, identify pain points, and prioritize courses of action for platforms, law enforcement, and targeted individuals. The multidisciplinary team and mixed methods approach will enable the project to not only build sophisticated tools, but also build scientific knowledge in multiple fields and to understand whether and how the proposed tools can contribute solutions to a complex societal problem.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.