Cybercrime Network

网络犯罪网络

• 批准号: EP/K003410/1
• 负责人: Aad Van Moorsel
• 金额: $ 12.85万
• 依托单位: Newcastle University
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2012
• 资助国家: 英国
• 起止时间: 2012 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=EP%2FK003410%2F1
• 关键词: Cybercrime; Network

The complicated interworking of players/parties and technology, embedded in society's legal and cultural context, implies that cybercrime research should consists of (and preferably integrate) multiple disciplines: it must understand the 'business' case behind the crime, the associated legal complexities in cyber space, the social and psychological enablers, the means and effectiveness of deterrence, the technology of the cyber systems, as well as the intricate relation between all of these. As a consequence, the Network aims to be highly interdisciplinary, bringing together researchers from all the mentioned disciplines, with roughly equal emphasis on technologists (computer scientists, engineers) and non-technologists (lawyers, social scientists and psychologists).Technology-wise, the Network aims to help in the coordination of 'practical security' or 'applied security' (for lack of better terms) research. Practical and applied security research thrives best if it is done in collaboration with the parties that eventually are targeted to use the research results. Interaction between researchers and end users is useful in the design stage (from requirements capturing to more 'intimate' user- and experience- driven design), in the development stage (through continuous feedback) and in the technology transfer stage. The Network proposes innovative ways to get researchers and end users together (professionally run workshop, actors for role playing, etc.), and encourages and supports its members to innovate in the ways it interacts with end users. The programme of networking is defined in two dimensions: time and space, as follows:- In 'time', we identify a first phase (18 months nominally) to initiate interaction and a second phase (also 18 months as a first estimate) to deliver results that help future research. In the first 18 months, the idea is to organise workshops and other events that bring together researchers and end users in order to understand the challenges faced in tackling cybercrime fully and to develop sound solutions. To achieve this, we will indeed need to put the emphasis on the end users in the first stage. The second 18 months will carry out consolidated workshops based on the lessons learnt in the first 18 months, and the emphasis will be shifted towards research and the establishment of research proposals and new networks, among others.- In 'space', the Network will have a number of Themes, each with its own leader and set of networking activities. We predefine three Themes to kick things off, but Network participants will have the opportunity to develop additional Themes (or even modify or tailor the existing ones) within the above framework. We identify the Themes as: (i) Internet safety, (ii) usable security, and (iii) cloud. The three user groups that we have identified so far are (i) victims, (ii) law enforcement, and (iii) SMEs, enterprises and organisation. We expect involvement of these end users in each Theme.

参与者/各方和技术的复杂相互作用，嵌入在社会的法律和文化背景中，意味着网络犯罪研究应该包括（最好是整合）多个学科：它必须理解犯罪背后的“商业”案例，网络空间中相关的法律复杂性，社会和心理因素，威慑的手段和有效性，网络系统的技术，以及所有这些之间的复杂关系。因此，该网络的目标是高度跨学科，将所有上述学科的研究人员聚集在一起，对技术专家（计算机科学家、工程师）和非技术专家（律师、社会科学家和心理学家）的重视程度大致相同。在技术方面，该网络旨在帮助协调“实际安全”或“应用安全”（由于缺乏更好的术语）研究。如果与最终使用研究结果的目标各方合作，则实际和应用安全研究将得到最好的发展。研究人员和最终用户之间的交互在设计阶段（从需求捕获到更“亲密”的用户和体验驱动的设计）、开发阶段（通过持续的反馈）和技术转让阶段都是有用的。该网络提出创新的方法让研究人员和最终用户聚在一起（专业运作的研讨会，角色扮演的演员等），并鼓励和支持其成员在与最终用户交互的方式上进行创新。在“时间”方面，我们确定第一阶段（名义上为18个月）启动互动，第二阶段（初步估计也为18个月）提供有助于未来研究的结果。在最初的18个月里，这个想法是组织研讨会和其他活动，将研究人员和最终用户聚集在一起，以了解全面解决网络犯罪所面临的挑战，并制定合理的解决方案。要做到这一点，我们确实需要在第一阶段把重点放在最终用户上。第二个18个月将根据前18个月的经验教训开展综合讲习班，重点将转移到研究和制定研究建议和新网络等方面。-在“空间”中，网络将有许多主题，每个主题都有自己的领导者和一套网络活动。我们预先定义了三个主题来启动，但是网络参与者将有机会在上述框架内开发其他主题（甚至修改或定制现有主题）。我们将“主题”定义为：(i)互联网安全、（ii）可用安全性和（iii）云。到目前为止，我们已确定的三个用户群体是(i)受害者，（ii）执法部门，以及（iii）中小企业、企业和机构。我们期望这些最终用户参与到每个主题中。

项目成果

Harvesting high value foreign currency transactions from EMV contactless cards without the PIN

无需 PIN 码即可从 EMV 非接触式卡获取高额外币交易

• 发表时间: 2014
• 作者: Emms M

Insider Threats

内部威胁

• DOI: 10.1145/2808783.2808785
• 发表时间: 2015
• 作者: McGough A

Harvesting High Value Foreign Currency Transactions from EMV Contactless Credit Cards Without the PIN

• DOI: 10.1145/2660267.2660312
• 发表时间: 2014-11
• 期刊: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security
• 作者: M. Emms;B. Arief;Leo Freitas;Joseph Hannon;A. Moorsel

Performance Modelling and Evaluation of Enterprise Information Security Technologies

• DOI: 10.1109/cit.2014.18
• 发表时间: 2014-09
• 期刊: 2014 IEEE International Conference on Computer and Information Technology
• 作者: W. Zeng;M. Koutny;A. Moorsel

Sensible Privacy

合理的隐私

• DOI: 10.1145/2665943.2665965
• 发表时间: 2014
• 作者: Arief B