Interdisciplinary Centre for Finding, Understanding and Countering Crime in the Cloud

寻找、理解和打击云端犯罪的跨学科中心

• 批准号: EP/M020320/1
• 负责人: Ross Anderson
• 金额: $ 251.72万
• 依托单位: University of Cambridge
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2015
• 资助国家: 英国
• 起止时间: 2015 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=EP%2FM020320%2F1
• 关键词: Interdisciplinary; Centre; Finding; Understanding; Countering

The Cambridge Interdisciplinary Centre for Crime in the Cloud (CICCC) will combine the diverse range of skills available in the Institute of Criminology, the Faculty of Law and the Computer Laboratory at the University of Cambridge. Our approach will be multidisciplinary, including researchers with expertise in computer science, criminology, cybersecurity, economics, psychology, forensics and law.Our approach will be data driven. We have negotiated access to some very substantial datasets including large feeds of data such as spam email messages and technical information about the operation of cloud services from several major cloud providers and public bodies. Together, they will constitute the largest data resource available anywhere outside of classified systems on abuse online; we will have more, and more diverse, data than almost all service firms or law enforcement agencies, creating a unique opportunity for research to develop new tools for cloud crime detection and forensics. We will mine and correlate these datasets to extract information about criminal activity. Our analysis will enhance our understanding of crime in the cloud, enable us to devise identifiers of such criminality, allow us to build systems to detect crime when it occurs, and ensure we collect evidence of wrongdoing to a high standard. We will work closely with law enforcement to ensure appropriate interventions can be undertaken.Our overall objective is to create a sustainable and internationally competitive centre for academic research into cybercrime. The primary aim of the centre is to improve the security of users of cloud services, and to improve outcomes for those who would be affected by their misuse. We will develop a strong legal framework to operate in, and maintain high ethical standards in everything we do. We will incorporate this into APIs for abuse data sharing that support appropriate authentication, nonrepudiation and privacy mechanisms, and feed these back to the industry.We aim to provide the police with an enhanced ability to search large amounts of data related to cybercrime in the cloud, improved forensics, better chain-of-custody mechanisms for evidence, additional training, and meaningful statistics on cybercrime. We have strong relationships with industry, and we will provide them with important data and insights on how, when and why criminality in the cloud occurs, thus enabling cloud providers to improve security for the users of cloud services by cracking down swiftly on abuse. We will also work closely with other academics, providing sanitised datasets to researchers generally, and enable trustworthy researchers access to our full dataset on the same basis as ourselves. This will solve the main problem faced by most academics who want to do research on cybercrime, namely the difficulty of getting access to real data on actual abuse.

剑桥云中犯罪跨学科中心(CICCC)将结合剑桥大学犯罪学研究所、法学院和计算机实验室提供的各种技能。我们的方法将是多学科的，包括计算机科学、犯罪学、网络安全、经济学、心理学、法医学和法律方面的专业知识。我们的方法将是数据驱动的。我们已经通过谈判访问了一些非常重要的数据集，包括来自几个主要云提供商和公共机构的大量数据馈送，如垃圾邮件消息和有关云服务运营的技术信息。加在一起，它们将构成除在线虐待机密系统之外可用的最大数据资源；我们将拥有比几乎所有服务公司或执法机构更多、更多样化的数据，为研究开发新的云犯罪检测和取证工具创造了一个独特的机会。我们将对这些数据集进行挖掘和关联，以提取有关犯罪活动的信息。我们的分析将增强我们对云中犯罪的理解，使我们能够设计出此类犯罪行为的识别器，使我们能够建立系统，在犯罪发生时进行侦查，并确保我们以高标准收集不当行为的证据。我们会与执法部门紧密合作，确保采取适当的干预措施。我们的总体目标是建立一个可持续发展和具有国际竞争力的网络犯罪学术研究中心。该中心的主要目标是提高云服务用户的安全，并改善那些可能受到滥用影响的人的结果。我们将建立强有力的法律框架，并在我们所做的每一件事上保持高标准的道德标准。我们将把这一点整合到支持适当身份验证、否认和隐私机制的滥用数据共享API中，并将这些反馈给行业。我们的目标是为警方提供增强的能力，以在云中搜索与网络犯罪相关的大量数据，改进取证，更好的监管链机制，额外的培训，以及有意义的网络犯罪统计数据。我们与业界有着密切的关系，我们将向他们提供有关云中犯罪行为如何、何时和为什么发生的重要数据和见解，从而使云提供商能够通过迅速打击滥用行为来提高云服务用户的安全性。我们还将与其他学者密切合作，向一般研究人员提供经过消毒的数据集，并使值得信赖的研究人员能够在与我们自己相同的基础上访问我们的完整数据集。这将解决大多数想要研究网络犯罪的学者面临的主要问题，即难以获得有关实际虐待的真实数据。

项目成果

Standardisation and Certification of the ‘Internet of Things’

“物联网”的标准化和认证

• DOI: 10.17863/cam.35286
• 发表时间: 2019
• 期刊: Conflict Studies: Inter-State Conflict eJournal
• 作者: Ross J. Anderson;É. Leverett;R. Clayton
• 通讯作者: R. Clayton

Making security sustainable

使安全可持续

• DOI: 10.1145/3180485
• 发表时间: 2018
• 期刊: Communications of the ACM
• 影响因子: 22.7
• 作者: Anderson R

Privacy and security: Making security sustainable

隐私和安全：使安全可持续

• DOI: 10.17863/cam.21919
• 发表时间: 2018
• 作者: Anderson R

Privacy for Tigers

老虎的隐私

• 发表时间: 2018
• 作者: Anderson R.

Measuring the Changing Cost of Cybercrime

衡量网络犯罪不断变化的成本

• DOI: 10.17863/cam.41598
• 发表时间: 2019
• 作者: Anderson R