Evaluating the risk reduction value of security products against mass market cyber crime

评估安全产品针对大众市场网络犯罪的风险降低价值

• 批准号: 298203-2013
• 负责人: Fernandez, JoséManuel
• 金额: $ 1.46万
• 依托单位: École Polytechnique de Montréal
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2014
• 资助国家: 加拿大
• 起止时间: 2014-01-01 至 2015-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=548262
• 关键词: Evaluating; risk; reduction; value; security

Mass-market cyber crime targets common users of computer systems worldwide. This type of crime exists in many different varieties, such as banking fraud, counterfeit sales, confidence fraud, fake anti-virus extortion, etc., depending on the monetizing scheme used by criminals to turn in a profit. An almost invariant characteristic of such crimes is that, at some point or other, cyber criminals need to compromise and take control of computers belonging to unsuspecting users. In certain cases, these compromised machines are only used as accessories to crime, and their owners are not directly impacted by these activities. However, in other cases such as banking fraud and cyber extortion, significant monetarily loss can be incurred by the owners of compromised machines.

大众市场网络犯罪的目标是全球计算机系统的普通用户。这种类型的犯罪有许多不同的种类，如银行欺诈、假冒销售、信心欺诈、假冒反病毒勒索等，这取决于犯罪分子使用的货币化方案来获利。此类犯罪的一个几乎不变的特征是，在某些时候，网络犯罪分子需要妥协并控制属于毫无戒心的用户的计算机。在某些情况下，这些受损的机器只是用作犯罪的附属品，它们的所有者不会直接受到这些活动的影响。然而，在其他情况下，例如银行欺诈和网络勒索，受损机器的所有者可能会遭受重大的经济损失。